Hi The data I'm collecting doesn't seem to match what I'm seeing by simple log file aggregation. More specifically the outbound traffic seems to be OK, however almost no inbound traffic is counted.
I've probably mis-configured, but it's a simple setup so can't find out where! I run pmacctd on a firewall/router in bridge mode. In simple ascii form: +--------------------+ +-----------------+ +-------------+ | Internal Network | | Firewall/Bridge | | ISP | | 192.168.1.0/25 |--| 192.168.1.2 |--| 192.168.1.1 | +--------------------+ +-----------------+ +-------------+ There are 2 network interfaces in the firewall (eth0 and eth2) which don't have an IP. They are combined in a bridge (br0) with IP 192.168.1.2. I have the following configuration: ! ! pmacctd configuration ! ! debug: true daemonize: true ! which interface to listed on interface: br0 ! use promisc when _not_ running on router/bridge/switch promisc: false ! write PID file pidfile: /var/run/pmacctd.pid ! syslog: daemon ! pmacctd_force_frag_handling: true ! aggregate[inbound]: dst_host aggregate[outbound]: src_host aggregate_filter[inbound]: dst net 192.168.1.0/25 aggregate_filter[outbound]: src net 192.168.1.0/25 ! plugins: mysql[inbound], mysql[outbound] ! sql_host: <hostname> sql_db: <dbname> sql_user: <user> sql_passwd: <passwd> sql_table[inbound]: acct_inbound_%Y%m sql_table_schema[inbound]: /etc/pmacctd/acct_v5_inbound_schema.sql sql_table[outbound]: acct_outbound_%Y%m sql_table_schema[outbound]: /etc/pmacctd/acct_v5_outbound_schema.sql sql_table_version: 5 sql_refresh_time: 120 sql_multi_values: 1024000 sql_history: 1d sql_history_roundoff: h Can anyone see anything I've missed? Need more information? -- Karl Latiss <[EMAIL PROTECTED]> Atvert Systems _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
