hi paolo, thanx for your answer.
Paolo Lucente schrieb: > Hi Thomas, > > On Wed, Aug 30, 2006 at 04:44:58PM +0200, Thomas Stegbauer wrote: > >> ./nfacctd -c src_host,dst_host -f /etc/pmacct/nfacctd.conf >> >> (i give -c on commandline, cause i dont know how to write it correctly >> to the logfile.) > > Well, '-c' corresponds to 'aggregate' configuration directive. You > should write it down the same way, ie.: > > aggregate: src_host, dst_host ok, i mixed aggregate and aggregate_filter i added to config now aggregate: src_host,dst_host,src_port,dst_port,proto,src_as,dst_as today src_as and dst_as get filled, but the values are mixed up. so in src_as stands the as which should be dst_as and vice versa. >> is there a way to check if data get lost? as this was possible with >> netflow2mysql? > > What kind of checks were you able to do? Sequence number based? yes like here Q4: http://inet-lab.naist.jp/measurement/NetFlow2MySQL/FAQ.html thanx thomas p.s lightly offtopic i am fairly new to postgresql, what sql-queries are possible to a field from type inet? i had this on mysql, where the ip-addresses got saved as number's SELECT 'input' AS typf, ipv4_dst_addr as ip, SUM(bytes) AS summe FROM record WHERE ((ipv4_dst_addr BETWEEN 3232235520 AND 3232235775) or (ipv4_dst_addr BETWEEN 167772160 and 167772415)); -- # Thomas Stegbauer # https://keyserver1.pgp.com/vkd/DownloadKey.event?keyid=0x9A3F1866FC68E91D # Key fingerprint = 5A2D FEDC 8A50 F1BB 25FB 967B 9A3F 1866 FC68 E91D _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
