Hi Vladimir,
your question just raised a focal point that has been inserted in the
FAQS document for the upcoming release. So, let me report it:
===
Q3: What does pmacct offer, what can it do for me, what are its main
features ?
A: pmacct can collect and export network data. Collect in memory tables,
SQL databases (MySQL, PostgreSQL, SQLite 3.x). Export data speaking
sFlow v5 and NetFlow v1/v5/v9, pmacct is suitable to aggregate data.
It can perform tagging, to mark data subsets (up to singular flow
granularity), classification (ie. this is Kazaa, that http and that
eDonkey), filtering, random sampling and renormalization. It's
actually not suitable to log raw data (ie. packet-by-packet as
tcpdump does or flow-by-flow as flow-tools or sflowtool do). And
finally it has not been thought to write into flat files.
===
Summarizing, if you need raw data (either on the screen, in flat-files
or SQL database), you need to use flow-tools or one of its countless
featureful clones.
Cheers,
Paolo
On Thu, Sep 21, 2006 at 09:30:46PM +0200, Vladimir Kovacevic wrote:
> How can I capture Start time and End time of the flow? There is only
> timestamp_inserted.
> I want raw data. Like flow-print from flow-tools
>
> with "flow-print -f5" I get:
> StartTime, EndTime,
> Sif, SrcIPaddress, SrcP,
> DIf, DstIPaddress, DstP,
> Protocol, Flows, Pkts, Octets
_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists
