Greetings,
Up until 0.9.0 I was able to aggregate based on src_mac and src_host.
This was helpful in order to identify systems sourcing packets with more
than one IP address.
Now, I'm getting a warning that src_mac is an unknown aggregation method:
# pmacctd -f pmacct.conf
WARN ( pmacct.conf ): ignoring unknown aggregation method: src_mac.
If there isn't an obvious explanation for this I'll try to track it down a
bit better. I'm running on FreeBSD 5.4-stable, and otherwise, everything
seems to be fine.
-Chris
!
! pmacct: In + Out
!
aggregate: src_mac,src_host
debug: false
daemonize: true
interface: em3
pcap_filter: src net 172.16.108.0/22 or src net 172.16.112.0/21
plugins: memory
plugin_pipe_size: 6291072
plugin_buffer_size: 4096
syslog: daemon
pidfile: /var/run/pmacctd-res.pid
