Hi Vito, On Wed, May 15, 2013 at 05:00:29PM +0200, [email protected] wrote:
> At the moment I'm using the nfprobe_plugin + nfacctd to collect the > netflow data (btw: to fullfill the vlan field I need Netflow v9, right? > ) and save them into the db, Yes, in order to have the VLAN field filled you have to use NetFlow v9: should that not work out of the box, please send me over privately a few VLAN-encapsulated packets so that i can troubleshoot that for you. > but I would prefer to just accounting the flow data (in my case I need: > vlan/src/dst/ports/start/end/packets/bytes) avoiding using the Netflow > paradigm. That's the only solution currently available. The ground to achieve your goal is already part of the code (see ip_flow.c): in brief, currently it only supports the L7 classification framework, it would be matter of exposing timestamps, etc. to the part where primitives are picked out of the mix (pkt_handlers.c): if you have got any resources at your end, i can point you more or less what is the work that should be done - we can follow-up privately on this. Cheers, Paolo _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
