Hi,

one of my probes has the following configuration:

daemonize: true
debug: true
interface: eth6
promisc: false
plugins: nfprobe
aggregate: src_host, dst_host, tag
networks_file: /usr/local/pmacct/etc/networks.server
nfprobe_receiver: X.X.X.X:9996
nfprobe_version: 5
nfprobe_engine: 2:4
pcap_filter: not port 8080
syslog: daemon

In networks.server are only ip addresses listed (/32), no
networks. My problem is, that my nfacctd writes content from
this probe to DB with port information (I aggregate only host
on probe) and also, it writes the ip addresses from clients
not listed in networks.server in the DB.
My thought was to do all filtering on the probes and leave the
server unconfigured (with filtering). Doesn't the networkds_file
parameter work with nfprobe plugin?

Thanks,
Michael

_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists

Reply via email to