Hi again, > This functionality was added but Paolo yesterday (Both sflow and netflow). > You > need to use pmacct 0.11.0rc1 (or higher).
OK > Yes. Same software, different daemon (called nfacctd). If you use my SUSE > packages they install startup scripts and example config files for you all > ready to go :-) OK > > One of the things that has really impressed me is that you already > > have some state machine and pattern matching code to detect some > > confiltive apps like FTP or even better, SIP, P2P, etc. Are this > > features available only in the "probe" software or also in the "server" > > software? > > These should work in both, although I dont use them myself. Mmmmm, I'm not sure about this. Both NetFlow and sFlow packages dont include package payload, so it would be impossible to do pattern matching on them, thus, IMHO it can be done only in the "probe". The connection tracking could be done in both the server and the probe, but surelly is more powerfull in the probe. > As long as you don't run an SQL server on your "small device" it should work > fine :-) Yes, yes, the "collector" side (server) is always in a powerful rack server, not in the probe device :) BTW, the little device is just a box appliance with 1Ghz Via CPU and 256MB of RAM, thats why I dont call it "embedded" :) > 99% of the work is done by someone we like to call SuperPaolo :-) Luca, Paolo, seems the traffic management field is in the hands of italian guys :) I guess we will help him out :) -- Jaime Nebrera - [EMAIL PROTECTED] Consultor TI - ENEO Tecnologia SL Pol. PISA - C/ Manufactura 6, P1, 3B Mairena del Aljarafe - 41927 - Sevilla Telf.- 955 60 11 60 / 619 04 55 18 _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
