Re: [pmacct-discussion] Request for Feedback: Additional Features for pmacct
These addon looks great in my book. I really do like pmacct but have not had the chance to implement it other than in testing due the the lack of a good frontend ( and due to the fact that we lack time to develop one ourself) Med vänlig hälsning Andreas Larsen IP-Only Telecommunication AB| Postadress: 753 81 UPPSALA | Besöksadress: S:t Persgatan 6, Uppsala | Telefon: +46 (0)18 843 10 00 | Direkt: +46 (0)18 843 10 56 www.ip-only.sehttps://webmail.ip-only.net/owa/UrlBlockedError.aspx 18 sep 2014 kl. 15:32 skrev Karl O. Pinc k...@meme.commailto:k...@meme.com: On 09/16/2014 11:50:56 AM, Thomas King wrote: On 16 Sep 2014, at 17:37, Karl O. Pinc k...@meme.commailto:k...@meme.com wrote: On 09/16/2014 04:25:19 AM, Thomas King wrote: We are thinking about adding features in the following categories: - Reconfiguration via API: As we want to use pmacct in a dynamic environment we want to be able to change the configuration via an API without restarting pmacct. Just curious. Why is an API required. Isn't a signal to re-read configs enough? If this can be done without interrupting the pmacct operations (and losing any data) it is enough I like the idea of a signal, it being the simplest API there is. It'd also then be trivial to add support for a system pmacct startup script that supports a reload operation, without data loss. Just my 2 cents. Karl k...@meme.commailto:k...@meme.com Free Software: You don't pay back, you pay forward. -- Robert A. Heinlein ___ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists ___ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
Re: [pmacct-discussion] Sflow !
Ok thanks for the clarification. The config file you see is actually all I have now in debug purpose. I have nothing else in the file. When I run sfacctd with the debug bgp_daemon_msglog I do get a lot of information like the one described below. sfacctd -f /etc/pmacct/sfacctd.conf -p /tmp/test.pipe However when I comment that field out in the configuration file and run the same command again I get nothing in the terminal !daemonize: true sfacctd_ip: X bgp_daemon: true bgp_daemon_ip:X bgp_daemon_max_peers: 100 bgp_aspath_radius: 3 sfacctd_as_new: bgp aggregate: src_as, dst_as, as_path ! tag, peer_src_as, peer_dst_as, peer_src_ip, peer_dst_ip, local_pref, as_path !bgp_daemon_msglog: true Sflow packets are coming in. 10:44:18.821453 IP X.X:X.X. X.X.X.X:6343: UDP, length 1156 I'm thinking I have done something wrong with the pmacct config file or maybe at the compilation of pmacct. Is there any debug I could try ? Regards Andreas -Ursprungligt meddelande- Från: pmacct-discussion-boun...@pmacct.net [mailto:pmacct-discussion-boun...@pmacct.net] För Paolo Lucente Skickat: den 28 december 2010 19:51 Till: pmacct-discussion@pmacct.net Ämne: Re: [pmacct-discussion] Sflow ! Hi Andreas, Thanks and same to you and all reading - Merry Christmas and Happy New Year. Follow in-line: On Tue, Dec 28, 2010 at 03:27:23PM +0100, Andreas Larsen wrote: if I add bgp_daemon_msglog: true, I get loads of flows coming in. default/core/BGP ): [Id:X ] u Prefix: '85.9.104.0/23' Path: '(Comms: EComms: '' LP: '50' MED: '0' Nexthop: X However as soon as I remove this I get no information at all in. Bgp comes up fine with my router. bgp_daemon_msglog lets you debug BGP messaging; it says nothing about sFlow samples or NetFlow flows. The moment pmacct is BGP peering with one or more routers this directive produces output on the screen or on the log files; if you comment it out from your configuration, then you don't get debugging information anymore. The fragment of configuration you posted looks simple enough; maybe it doesn't give the entire feel since you also mention an aggregate_filter directive. From what i see if your routers are a) sending sFlow datagrams to the right IP address and port, b) firewall on the collector box is allowing sFlow and BGP to pass through and c) the routers are using the same IP address for the sFlow agent ID and to BGP peer with pmacct then you should see your MySQL database populated. Let me know. Cheers, Paolo ___ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists ___ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
[pmacct-discussion] Sflow !
Hello first of all merry Christmas and a Happy new year. I'm trying to accomplish the same as discussed in this thread on the archive. http://www.mail-archive.com/pmacct-discussion@pmacct.net/msg01341.html I want to be able to search thru my mysql database, packets to and from a AS. Below is my configuration Pmacct 0.12.3 !daemonize: true sfacctd_ip: X.X.X.X bgp_daemon: true bgp_daemon_ip: X.X.X.X bgp_daemon_max_peers: 100 bgp_aspath_radius: 3 sfacctd_as_new: bgp aggregate: src_as, dst_as, as_path if I add bgp_daemon_msglog: true, I get loads of flows coming in. default/core/BGP ): [Id:X ] u Prefix: '85.9.104.0/23' Path: '(Comms: EComms: '' LP: '50' MED: '0' Nexthop: X However as soon as I remove this I get no information at all in. Bgp comes up fine with my router. I have not quite understood the aggregate filter I guess since I get no information from that. I was wondering what I'm doing wrong and if you guys have any pointers ? Regards Andreas ___ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
