Re: [pmacct-discussion] Trouble with average packetsize

2014-03-06 Thread Johannes Formann
Hi all, after a lot of testing and changing everything (pmacct version, newer libpcap, kernel, Motherboard, switch) the reason behind the problem was quite trivial: The network card (intel 1000e series) has some hardware acceleration functions that can assemble fragmented packets bevor showing t

Re: [pmacct-discussion] Trouble with average packetsize

2014-02-26 Thread Johannes Formann
Hi Paolo, Thanks for your response. I tried the SVS-Version (is the repository on the website the right one, it has 0.14 in the path) and have the same problems. Changing the buffer to the size you suggested don’t help too. Build it using this commands: mkdir pmacct-latest cd pmacct-latest/ CVS

Re: [pmacct-discussion] Trouble with average packetsize

2014-02-26 Thread Paolo Lucente
Hi Johannes, This is indeed strange. I have two leads: there was a bug around syslog logging being fixed recently (post 1.5.0rc2); the bug was causing some memory corruption: can you, for a try, log directly to a file via 'logfile' directive (or alternatively, slightly more involved, upgrade to la

[pmacct-discussion] Trouble with average packetsize

2014-02-25 Thread Johannes Formann
Hello, I try to run pmacct on a debian 7 box. Basically everything runs fine, except sometimes pmacctd mud miscount the traffic, since the average packetize goes over 1500 (latest size observed about 7.000) wich is not possible (MTU-Limit of 1500 bytes). Same problem with the debian packages an