[pmacct-discussion] Pmacct not adding the as number

[Joan]

Hello,

I am trying to get pmacct workting to replace softflowd because we'd like
to have the as numbers for the networks populated.
To accomplish this I am using the script to generate the networks_file from
quagga (I had a couple of issues but it's ok now)

This is my pmactd.conf config:
/etc/pmacct/pmactd.conf
 daemonize: true

 pidfile: /var/run/pmacctd.pid

 syslog: daemon

 aggregate: src_host,dst_host

 pcap_filter: net 0.0.0.0/0

 interface: br0

 plugins: nfprobe

 nfprobe_version: 9

 networks_file: /etc/pmacct/networks.lst

 nfprobe_receiver: 192.168.1.5:2591 


 nfprobe_version: 9

And in the flow collector I am checking for the as numbers with nfdump, but
the output of srcas/dstas is always 0
 nfdump -A srcas -N  -M /var/lib/netflow/profiles-data/live/ -o "fmt:%sa
%fl %byt %pkt %sas %das" -R nfcapd.201307051420:nfcapd.201307051425

Did I miss something in the pmacctd config? I don't see anything relevant
in the logs.
___
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists

[pmacct-discussion] Crash in pmacct

[Joan]

Hi again,

I am experiencing crashes only after a couple of minutes of starting
pmacctd. I am on the current squeeze version, but I recompiled from the
sources to get non-stripped binaries.
After running the process for some minutes the program crashes as usually
leaving a nice backtrace.
Could you have a look into this and tell me if it's something that was
fixed in a newer version?

Regards,

Joan


pmacct.backtrace
Description: Binary data
___
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists

Re: [pmacct-discussion] Pmacct not adding the as number

[Paolo Lucente]

xHi Joan,

Thanks for explaining the background, it makes sense. To get ASNs info
populated you should add src_as and dst_as primitives to your aggregate
directive. Same as any further info you wish to see populated. 

Let me know how that goes. I see you dropped a separate email about a
crash, along with a backtrace, thanks for that. I will look into it,
ie. maybe you already hinted the above yourself and got to the next
stage, and get back to you.

Cheers,
Paolo

On Fri, Jul 05, 2013 at 02:35:15PM +0200, Joan wrote:
> Hello,
> 
> I am trying to get pmacct workting to replace softflowd because we'd like
> to have the as numbers for the networks populated.
> To accomplish this I am using the script to generate the networks_file from
> quagga (I had a couple of issues but it's ok now)
> 
> This is my pmactd.conf config:
> /etc/pmacct/pmactd.conf
>  daemonize: true
> 
>  pidfile: /var/run/pmacctd.pid
> 
>  syslog: daemon
> 
>  aggregate: src_host,dst_host
> 
>  pcap_filter: net 0.0.0.0/0
> 
>  interface: br0
> 
>  plugins: nfprobe
> 
>  nfprobe_version: 9
> 
>  networks_file: /etc/pmacct/networks.lst
> 
>  nfprobe_receiver: 192.168.1.5:2591 
> 
> 
>  nfprobe_version: 9
> 
> And in the flow collector I am checking for the as numbers with nfdump, but
> the output of srcas/dstas is always 0
>  nfdump -A srcas -N  -M /var/lib/netflow/profiles-data/live/ -o "fmt:%sa
> %fl %byt %pkt %sas %das" -R nfcapd.201307051420:nfcapd.201307051425
> 
> Did I miss something in the pmacctd config? I don't see anything relevant
> in the logs.

> ___
> pmacct-discussion mailing list
> http://www.pmacct.net/#mailinglists


___
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists

Re: [pmacct-discussion] Crash in pmacct

[Paolo Lucente]

Hi Joan,

I can verify the backtrace you provided does not apply to the current
(and 0.14.3 release to that matter) code. Also, the issue is related to
querying the content of a networks_file - which is a part of the code
that got some changes meanwhile. I propose you download/compile 0.14.3
release or CVS code and try again. If these still give troubles please
send me privately a new backtrace to inspect. Let me know.

Cheers,
Paolo

On Fri, Jul 05, 2013 at 06:46:21PM +0200, Joan wrote:
> Hi again,
> 
> I am experiencing crashes only after a couple of minutes of starting
> pmacctd. I am on the current squeeze version, but I recompiled from the
> sources to get non-stripped binaries.
> After running the process for some minutes the program crashes as usually
> leaving a nice backtrace.
> Could you have a look into this and tell me if it's something that was
> fixed in a newer version?
> 
> Regards,
> 
> Joan


> ___
> pmacct-discussion mailing list
> http://www.pmacct.net/#mailinglists


___
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists

Re: [pmacct-discussion] Crash in pmacct

[Karl O. Pinc]

As an alternative you should consider upgrading to debian
wheezy as squeeze will go out of support about 2013-11-04,
in 4 months.
You'll have to upgrade anyway and this might fix your problem.
Wheezy has pmacct 0.14.0.

You can get help with any of this for debian using irc chat on 
the #debian channel of irc.freenode.net.

On 07/05/2013 05:39:41 PM, Paolo Lucente wrote:
> Hi Joan,
> 
> I can verify the backtrace you provided does not apply to the current
> (and 0.14.3 release to that matter) code. Also, the issue is related
> to
> querying the content of a networks_file - which is a part of the code
> that got some changes meanwhile. I propose you download/compile 
> 0.14.3
> release or CVS code and try again. If these still give troubles 
> please
> send me privately a new backtrace to inspect. Let me know.
> 
> Cheers,
> Paolo
> 
> On Fri, Jul 05, 2013 at 06:46:21PM +0200, Joan wrote:
> > Hi again,
> > 
> > I am experiencing crashes only after a couple of minutes of 
> starting-04
> > pmacctd. I am on the current squeeze version, but I recompiled from
> the
> > sources to get non-stripped binaries.
> > After running the process for some minutes the program crashes as
> usually
> > leaving a nice backtrace.
> > Could you have a look into this and tell me if it's something that
> was
> > fixed in a newer version?
> > 
> > Regards,
> > 
> > Joan
> 
> 
> > ___
> > pmacct-discussion mailing list
> > http://www.pmacct.net/#mailinglists
> 
> 
> ___
> pmacct-discussion mailing list
> http://www.pmacct.net/#mailinglists
> 
> 




Karl 
Free Software:  "You don't pay back, you pay forward."
 -- Robert A. Heinlein

___
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists