Re: [pmacct-discussion] Pmacct configuration with direction of traffic

2020-02-27 Thread Alex K
t one per > line. Then in the config you want to set 'networks_file_filter: true' as > well. This is kind-of filtering: networks / IPs not of interest will be > just zeroed out and rolled up as a 0.0.0.0 src_host / dst_host. > > Paolo > > On Wed, Feb 26, 2020 at 11:32:31AM +0200,

Re: [pmacct-discussion] Pmacct configuration with direction of traffic

2020-02-26 Thread Alex K
bug. > > Paolo > > On Tue, Feb 25, 2020 at 11:20:21AM +0200, Alex K wrote: > > Here is the output when running in debug mode: > > > > INFO ( default/core ): Linux NetFilter NFLOG Accounting Daemon, uacctd > > (20200222-01) > > INFO ( default/core ):

Re: [pmacct-discussion] Pmacct configuration with direction of traffic

2020-02-25 Thread Alex K
o ICMP (1), length 84) 8.8.8.8 > 192.168.28.11: ICMP echo reply, id 17353, seq 2, length 64 The pmacct version I am running is latest master. Thank you for your assistance. Alex On Mon, Feb 24, 2020 at 6:20 PM Alex K wrote: > Hi Paolo, > > On Sat, Feb 22, 2020 at 4:18 PM

Re: [pmacct-discussion] Pmacct configuration with direction of traffic

2020-02-24 Thread Alex K
lected from uacctd at NFLOG goup 1 pre_tag_map: pretag2.map pre_tag_filter[print_wan0_in]: 1 pre_tag_filter[print_wan0_out]: 2 I am running pmacct 1.7.4. > Paolo > > On Fri, Feb 21, 2020 at 01:04:25PM +0200, Alex K wrote: > > Working further on this, it seems that for pmac

Re: [pmacct-discussion] Pmacct configuration with direction of traffic

2020-02-21 Thread Alex K
://github.com/pmacct/pmacct/blob/master/examples/pretag.map.example. Thanx, Alex On Thu, Feb 20, 2020 at 6:33 PM Alex K wrote: > Hi all, > > I have a router with multiple interfaces and will need to account traffic > at its several WAN interfaces. My purpose is toaccount the traffic with

[pmacct-discussion] Pmacct configuration with direction of traffic

2020-02-20 Thread Alex K
Hi all, I have a router with multiple interfaces and will need to account traffic at its several WAN interfaces. My purpose is toaccount the traffic with the tuple details and the direction. As a test I have compiled the following simple configuration for pmacctd: ! daemonize: true plugins:

Re: [pmacct-discussion] pmacct on ppp interface

2019-05-30 Thread Alex K
captured at the nflog:1 interface of the sim0 ppp interface. At other non-ppp interfaces capturing is fine for IN/OUT. Thanx On Wed, May 29, 2019 at 6:08 PM Alex K wrote: > Hi Paolo, > > > On Wed, May 29, 2019 at 4:31 PM Alex K wrote: > >> Hi Paolo, >> >> You

Re: [pmacct-discussion] pmacct on ppp interface

2019-05-29 Thread Alex K
or master code. That said i can > confirm pmacctd/uacctd should support PPP-encapsulated traffic. Also, you > may send me a trace of the NFLOG traffic (as captured by tcpdump) via > unicast email for some troubleshooting. > > Paolo > > On Wed, May 29, 2019 at 12:37:40PM +0300, Al

[pmacct-discussion] pmacct on ppp interface

2019-05-29 Thread Alex K
Hi All, I am facing the following issue: I have configured iptables to log packets coming through a ppp interface (named sim0) using NFLOG target. These packets are forwarded to uacctd to the respective uacctd group, as below, which are printed in a CSV file using the print plugin: iptables

Re: [pmacct-discussion] uacctd memory usage

2018-06-25 Thread Alex K
ternet -> rabbitmq -> logstash -> elasticsearch > > as ever YMMV :-) > Dariush > > > On 25 Jun 2018, at 16:53, Alex K wrote: > > > > On Mon, Jun 25, 2018 at 6:49 PM, Rasto Rickardt wrote: > >> Hello, >> >> If there is no more RAM available,

Re: [pmacct-discussion] uacctd memory usage

2018-06-25 Thread Alex K
n available RAM > is around 400MB. > This is already done. > r. > > On 06/25/2018 05:35 PM, Alex K wrote: > > Thanks Dariush. Appreciate your feedback. > > > > I was testing several stripped down kernels by compiling and removing > > most of unused modules.

Re: [pmacct-discussion] uacctd memory usage

2018-06-25 Thread Alex K
That’s a maintenance > overhead you want to avoid unless you have to. > Having said all that, if you’re looking at deploying thousands of units, > the economics of software maintenance may stack up for you. > > HTH > Dariush > > > On 25 Jun 2018, at 14:32, Alex K wrote:

Re: [pmacct-discussion] uacctd memory usage

2018-06-25 Thread Alex K
worth ? > This is not an option. What I have is 4 GB. This is not just a personal project. There are going to be thousands of such installations... HTH Dariush On 25 Jun 2018, at 12:32, Alex K wrote: Thanx for the reply. The output of free is the following: free totaluse

Re: [pmacct-discussion] uacctd memory usage

2018-06-25 Thread Alex K
with memory. Thanx, Alex On Mon, Jun 25, 2018 at 2:22 PM, Dariush Marsh-Mossadeghi < dari...@gravitas.co.uk> wrote: > > On 25 Jun 2018, at 11:54, Alex K wrote: > > Hi all, > > I have a setup with uacctd monitoring traffic of several interfaces > through NFLOG.

Re: [pmacct-discussion] pmacct 1.7.1 released !

2018-05-06 Thread Alex K
Keep up the good work Paolo and thanx for this excellent software! Alex On Sun, May 6, 2018 at 4:44 PM, Paolo Lucente wrote: > VERSION. > 1.7.1 > > > DESCRIPTION. > pmacct is a small set of multi-purpose passive network monitoring tools. It > can account, classify, aggregate,