Hi Michael, On Wed, Dec 20, 2006 at 02:22:52PM +0100, Muenz, Michael wrote: > Hi, > > I'm very new to pmacct and have just set up 1 collector and 1 probe. I > use sql accounting with v5 and configured pmacct as a nfprobe with > engine_id of 1:0. I can set it to whatever (2, 1:1, 1:0), every entry in > my DB is 0.
Your probe config is fine. Though, you are missing a few bits inside the collector config, preventing to work it as intended. These are the bits: - 'aggregate' directives need to explicitely include the 'tag' primitive, in order to give value to the 'agent_id' field. - you need to match engine_id/engine_type fields inside NetFlow datagrams and get a 'tag'. In order to do this, you have to add a line similar to the following one: 'pre_tag_map: /path/to/pretag.map' and fill such file like: 'id=1000 ip=<probe's IP address> engine_id=1 engine_type=0'. Then, getting a look to your memory/sql tables, you will happily find such '1000' value in your 'agent_id' field. examples/pretag.map.example in the distribution tarball gives a comprehensive overview about Pre-Tagging. You can also get a look to the 'pre_tag_map' description in CONFIG-KEYS. Cheers, Paolo _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
