And sometimes the filenames look correct but again they all come out at the
same time:
(root) packet1:/opt/pmacct/data# ls -lt | head
total 6670424
-rw------- 1 root root 3005237 Oct 21 15:28 nfacct-20151021-1525.csv
-rw------- 1 root root 1461133 Oct 21 15:28 nfacct-20151021-1527.csv
-rw------- 1 root root 2292406 Oct 21 15:28 nfacct-20151021-1526.csv
-rw------- 1 root root 3505033 Oct 21 15:27 nfacct-20151021-1524.csv
-rw------- 1 root root 2178942 Oct 21 15:26 nfacct-20151021-1523.csv
-rw------- 1 root root 2551924 Oct 21 15:24 nfacct-20151021-1522.csv
-rw------- 1 root root 3633218 Oct 21 15:23 nfacct-20151021-1521.csv
-rw------- 1 root root 2407956 Oct 21 15:22 nfacct-20151021-1520.csv
-rw------- 1 root root 2669403 Oct 21 15:21 nfacct-20151021-1519.csv
(root) packet1:/opt/pmacct/data# perl -le 'foreach (qw{1519 1520 1521 1522
1523 1524 1525 1526 1527}){print("$_: ".
localtime((stat("nfacct-20151021-$_.csv"))[9]))}'
1519: Wed Oct 21 15:21:46 2015
1520: Wed Oct 21 15:22:50 2015
1521: Wed Oct 21 15:23:53 2015
1522: Wed Oct 21 15:24:58 2015
1523: Wed Oct 21 15:26:02 2015
1524: Wed Oct 21 15:27:06 2015
1525: Wed Oct 21 15:28:10 2015
1526: Wed Oct 21 15:28:10 2015
1527: Wed Oct 21 15:28:10 2015
Seems related?
On Wed, Oct 21, 2015 at 3:28 PM, Edward Henigin <e...@eaohana.com> wrote:
> Hi Paolo,
>
> Running pmacct 1.5.2, simply using the print plugin, I'm getting multiple
> files coming out at the same time with filenames suggesting they should be
> coming out at different times, and sometimes very strange filenames like
> the data is very old.
>
> ls output:
>
> (root) packet1:/opt/pmacct/data# ls -lt | head
> total 6649800
> -rw------- 1 root root 1785873 Oct 21 15:20 nfacct-20151021-1450.csv
> -rw------- 1 root root 2740509 Oct 21 15:20 nfacct-20151021-1518.csv
> -rw------- 1 root root 2597403 Oct 21 15:20 nfacct-20151021-1519.csv
> -rw------- 1 root root 2778987 Oct 21 15:19 nfacct-20151021-1517.csv
> -rw------- 1 root root 3017902 Oct 21 15:18 nfacct-20151021-1516.csv
> -rw------- 1 root root 2860626 Oct 21 15:17 nfacct-20151021-1515.csv
> -rw------- 1 root root 3013418 Oct 21 15:16 nfacct-20151021-1514.csv
> -rw------- 1 root root 3433555 Oct 21 15:15 nfacct-20151021-1513.csv
> -rw------- 1 root root 2752513 Oct 21 15:14 nfacct-20151021-1512.csv
>
> and timestamps to the second:
>
> (root) packet1:/opt/pmacct/data# perl -le 'foreach (qw{1512 1513 1514 1515
> 1516 1517 1518 1450}){print("$_: ".
> localtime((stat("nfacct-20151021-$_.csv"))[9]))}'
> 1512: Wed Oct 21 15:14:18 2015
> 1513: Wed Oct 21 15:15:22 2015
> 1514: Wed Oct 21 15:16:26 2015
> 1515: Wed Oct 21 15:17:30 2015
> 1516: Wed Oct 21 15:18:34 2015
> 1517: Wed Oct 21 15:19:38 2015
> 1518: Wed Oct 21 15:20:42 2015
> 1450: Wed Oct 21 15:20:42 2015
>
> Where is filename "...-1450" coming from, and why is it coming out at the
> same time as -1518?
>
> *Configuration:*
>
> ! nfacctd configuration file
> aggregate: peer_src_ip,in_iface,dst_host,dst_mask
> plugins: print
> plugin_buffer_size: 10240
> imt_buckets: 157
> imt_mem_pools_number: 256
> imt_mem_pools_size: 32768
> syslog: daemon
> daemonize: true
> !
> print_refresh_time: 64
> print_history: 1m
> print_output: csv
> print_output_file: /opt/pmacct/data/nfacct-%Y%m%d-%H%M.csv
> print_output_file_append: true
> !
> nfacctd_port: 2055
>
> *Syslog:*
>
> Oct 21 15:15:21 packet1 nfacctd[558]: INFO ( default/print ): *** Purging
> cache - START (PID: 558) ***
> Oct 21 15:15:22 packet1 nfacctd[558]: INFO ( default/print ): *** Purging
> cache - END (PID: 558, QN: 80643/80847, ET: 1) ***
> Oct 21 15:16:25 packet1 nfacctd[593]: INFO ( default/print ): *** Purging
> cache - START (PID: 593) ***
> Oct 21 15:16:26 packet1 nfacctd[593]: INFO ( default/print ): *** Purging
> cache - END (PID: 593, QN: 74092/74503, ET: 1) ***
> Oct 21 15:17:29 packet1 nfacctd[651]: INFO ( default/print ): *** Purging
> cache - START (PID: 651) ***
> Oct 21 15:17:30 packet1 nfacctd[651]: INFO ( default/print ): *** Purging
> cache - END (PID: 651, QN: 74211/74621, ET: 1) ***
> Oct 21 15:18:33 packet1 nfacctd[690]: INFO ( default/print ): *** Purging
> cache - START (PID: 690) ***
> Oct 21 15:18:34 packet1 nfacctd[690]: INFO ( default/print ): *** Purging
> cache - END (PID: 690, QN: 71470/72233, ET: 1) ***
> Oct 21 15:19:37 packet1 nfacctd[739]: INFO ( default/print ): *** Purging
> cache - START (PID: 739) ***
> Oct 21 15:19:38 packet1 nfacctd[739]: INFO ( default/print ): *** Purging
> cache - END (PID: 739, QN: 69195/73637, ET: 1) ***
> Oct 21 15:20:41 packet1 nfacctd[779]: INFO ( default/print ): *** Purging
> cache - START (PID: 779) ***
> Oct 21 15:20:42 packet1 nfacctd[779]: INFO ( default/print ): *** Purging
> cache - END (PID: 779, QN: 67848/83867, ET: 1) ***
>
>
> Ed
>
>
_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists
