Hi Paolo,
Running pmacct 1.5.2, simply using the print plugin, I'm getting multiple
files coming out at the same time with filenames suggesting they should be
coming out at different times, and sometimes very strange filenames like
the data is very old.
ls output:
(root) packet1:/opt/pmacct/data# ls -lt | head
total 6649800
-rw------- 1 root root 1785873 Oct 21 15:20 nfacct-20151021-1450.csv
-rw------- 1 root root 2740509 Oct 21 15:20 nfacct-20151021-1518.csv
-rw------- 1 root root 2597403 Oct 21 15:20 nfacct-20151021-1519.csv
-rw------- 1 root root 2778987 Oct 21 15:19 nfacct-20151021-1517.csv
-rw------- 1 root root 3017902 Oct 21 15:18 nfacct-20151021-1516.csv
-rw------- 1 root root 2860626 Oct 21 15:17 nfacct-20151021-1515.csv
-rw------- 1 root root 3013418 Oct 21 15:16 nfacct-20151021-1514.csv
-rw------- 1 root root 3433555 Oct 21 15:15 nfacct-20151021-1513.csv
-rw------- 1 root root 2752513 Oct 21 15:14 nfacct-20151021-1512.csv
and timestamps to the second:
(root) packet1:/opt/pmacct/data# perl -le 'foreach (qw{1512 1513 1514 1515
1516 1517 1518 1450}){print("$_: ".
localtime((stat("nfacct-20151021-$_.csv"))[9]))}'
1512: Wed Oct 21 15:14:18 2015
1513: Wed Oct 21 15:15:22 2015
1514: Wed Oct 21 15:16:26 2015
1515: Wed Oct 21 15:17:30 2015
1516: Wed Oct 21 15:18:34 2015
1517: Wed Oct 21 15:19:38 2015
1518: Wed Oct 21 15:20:42 2015
1450: Wed Oct 21 15:20:42 2015
Where is filename "...-1450" coming from, and why is it coming out at the
same time as -1518?
*Configuration:*
! nfacctd configuration file
aggregate: peer_src_ip,in_iface,dst_host,dst_mask
plugins: print
plugin_buffer_size: 10240
imt_buckets: 157
imt_mem_pools_number: 256
imt_mem_pools_size: 32768
syslog: daemon
daemonize: true
!
print_refresh_time: 64
print_history: 1m
print_output: csv
print_output_file: /opt/pmacct/data/nfacct-%Y%m%d-%H%M.csv
print_output_file_append: true
!
nfacctd_port: 2055
*Syslog:*
Oct 21 15:15:21 packet1 nfacctd[558]: INFO ( default/print ): *** Purging
cache - START (PID: 558) ***
Oct 21 15:15:22 packet1 nfacctd[558]: INFO ( default/print ): *** Purging
cache - END (PID: 558, QN: 80643/80847, ET: 1) ***
Oct 21 15:16:25 packet1 nfacctd[593]: INFO ( default/print ): *** Purging
cache - START (PID: 593) ***
Oct 21 15:16:26 packet1 nfacctd[593]: INFO ( default/print ): *** Purging
cache - END (PID: 593, QN: 74092/74503, ET: 1) ***
Oct 21 15:17:29 packet1 nfacctd[651]: INFO ( default/print ): *** Purging
cache - START (PID: 651) ***
Oct 21 15:17:30 packet1 nfacctd[651]: INFO ( default/print ): *** Purging
cache - END (PID: 651, QN: 74211/74621, ET: 1) ***
Oct 21 15:18:33 packet1 nfacctd[690]: INFO ( default/print ): *** Purging
cache - START (PID: 690) ***
Oct 21 15:18:34 packet1 nfacctd[690]: INFO ( default/print ): *** Purging
cache - END (PID: 690, QN: 71470/72233, ET: 1) ***
Oct 21 15:19:37 packet1 nfacctd[739]: INFO ( default/print ): *** Purging
cache - START (PID: 739) ***
Oct 21 15:19:38 packet1 nfacctd[739]: INFO ( default/print ): *** Purging
cache - END (PID: 739, QN: 69195/73637, ET: 1) ***
Oct 21 15:20:41 packet1 nfacctd[779]: INFO ( default/print ): *** Purging
cache - START (PID: 779) ***
Oct 21 15:20:42 packet1 nfacctd[779]: INFO ( default/print ): *** Purging
cache - END (PID: 779, QN: 67848/83867, ET: 1) ***
Ed
_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists
