Thank you, that was my problem. Terry
-----Original Message----- From: pmacct-discussion [mailto:pmacct-discussion-boun...@pmacct.net] On Behalf Of Paolo Lucente Sent: Wednesday, December 04, 2013 5:53 PM To: pmacct-discussion@pmacct.net Subject: Re: [pmacct-discussion] nfacctd Networks Problem Hi Terry, What version of pmacct are you running? If a recent one, ie. >= 0.14.3, you should have 'networks_file_filter: true' in your config in order to explicitely enable filtering (as is documented in the CONFIG-KEYS file). Cheers, Paolo On Thu, Dec 05, 2013 at 12:37:58AM +0000, Terry Duchcherer wrote: > Just trying to setup nfacctd to aggregate our traffic on a per host basis. To > import into our billing application. > > Nfacct.conf > debug: true > ! > daemonize: false > nfacctd_time_new: true > plugins: mysql > aggregate: sum_host > sql_db: pmacct > sql_table: acct > sql_table_version: 1 > sql_passwd: ****** > sql_user: ****** > sql_host: 10.0.8.36 > sql_refresh_time: 90 > ! sql_optimize_clauses: true > sql_history: 10m > sql_history_roundoff: mh > nfacctd_ip: 10.0.8.40 > nfacctd_port: 9996 > !logfile: /var/log/nfacctd.log > ! sql_preprocess: qnum=1000, minp=5 > networks_file: /etc/nfacctd.networks > ! ports_file: ./ports.example > > /etc/nfacctd.networks > 192.168.88.0/21 (Not Real Networks) > 192.168.40.0/22 > > Debug Output: > [root@pmacct sbin]# nfacctd -f /etc/nfacctd.conf INFO ( default/mysql > ): 110592 bytes are available to address shared memory segment; buffer size > is 168 bytes. > INFO ( default/mysql ): Trying to allocate a shared memory segment of 4644864 > bytes. > DEBUG ( /etc/nfacctd.networks ): [networks table IPv4] nh: asn: 0 > net: 192.168.40.0 mask: 22 DEBUG ( /etc/nfacctd.networks ): [networks > table IPv4] nh: asn: 0 net: 192.168.88.0 mask: 21 DEBUG ( > /etc/nfacctd.networks ): IPv4 Networks Cache successfully created: 99991 > entries. > DEBUG ( /etc/nfacctd.networks ): [networks table IPv4] nh: asn: 0 > net: 192.168.40.0 mask: 22 DEBUG ( /etc/nfacctd.networks ): [networks > table IPv4] nh: asn: 0 net: 192.168.88.0 mask: 21 DEBUG ( > /etc/nfacctd.networks ): IPv4 Networks Cache successfully created: 99991 > entries. > INFO ( default/core ): waiting for NetFlow data on 10.0.8.40:9996 ( > default/mysql ) *** Purging queries queue *** ( default/mysql ) *** > Purging cache - START *** ( default/mysql ) *** Purging cache - END > (QN: 0, ET: 0) *** > OK: Exiting ... > > However, when this writes to MySQL it includes all hosts from all networks. > The documentation seems straight forward, but it is not working for me. > > I have also tried limiting to a single /24 network, but still get all hosts. > > What am I doing wrong? > > Thanks in Advance; > Terry > > _______________________________________________ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
