Hello Paolo,
(Proxy adress 11.11.11.11)
LAN----->>MAIN ROUTER<<<[[ HUB ]]----PROXY--------->>>OUTBAND
ROUTER--->>INTERNET
|
|
-->PMACCT MACHINE
This way as u see all LAN connections are invisible becouse Main
router,routes all traffic and doesnt pass them .Accounting machine i
before PROXY this way all the connections with proxy are seen like
IP_dst with 0.0.0.0 source (that includes 11.11.11.11).
This way traffic from proxy is counted like Internet connections.
With applying not host 11.11.11.11 seems pmacct doesnt count packets
any more.
Is pcap_filter directive in pmacctd.conf ?
If thats so thats great.
Any way i hope my lilttle drawing was a bit of help.
Peter
PL> Hello Peter,
PL> If you need to filter out some IP addresses/network chunks from the
accounting
PL> process you just need to play around the 'pcap_filter' directive (which
expects
PL> a filter in the libpcap syntax, usually well-documented in the tcpdump
manpage).
PL> The 'pcap_filter' directive is applied to all captured packets (which
should be
PL> what you want) and is pushed to the libpcap (which means fast because
unwanted
PL> packets are discarded before they reach 'pmacctd').
PL> The 'not host xxx.xxx.xxx.xxx' should fit your needs, however i've not been
able
PL> to understand well the scenario (a basic ASCII-graph might be of help).
PL> Cheers,
PL> Paolo
PL> _______________________________________________
PL> pmacct-discussion mailing list
PL> [email protected]
PL> http://muffin.area.ba.cnr.it/mailman/listinfo/pmacct-discussion
--
Best regards,
Pajlatek mailto:[EMAIL PROTECTED]
