Is per-plugin filtering of sflow samples by tcp port number supported ? The following config is intended to count tcp port 179 traffic aggregated by mac address pairs. It counts no traffic at all (there are no data rows in the table). Without the filter it is correctly counting all the traffic. I have confirmed that there is tcp port 179 traffic being sampled.
Thanks, Chris. Config file: !! Global pidfile: /tmp/sfacctd/pid sfacctd_port: 6343 sfacctd_ip: 127.0.0.1 sfacctd_renormalize: true pmacctd_force_frag_handling: true ! plugins: memory[foo] ! aggregate_filter[foo]: tcp port 179 aggregate[foo]: src_mac, dst_mac imt_path[foo]: /tmp/sfacctd/foo.pipe _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
