Hi,
first of all, thanks for this nice tool.
I am trying to setup accouting for a small subnet using pmacct. Right
now, I am only interested in total traffic per IP. I have setup pmacct
on a test box that utilizes a PPP uplink. On the test machine the
traffic reported seems reasonable. However, on the gateway machine for
the subnet I want to account traffic on, I get weird results. Within a
few minutes the traffic reaches Gigabytes, which I know is not the
case because I can compare the results to the data my ISP provides.
Unfortunately they only provide totals for in and out.
+------- Host A
+---------+ |
ISP --- eth1 | Gateway | eth2 ---+------- Host B
+---------+ |
+------- Host C
My ISP routes a /28 subnet through eth1 of the gateway machine pmacct
is running on. My pmacctd.conf looks like an example I found on the net:
debug: false
interface: eth1
daemonize: true
aggregate[inbound]: dst_host
aggregate[outbound]: src_host
aggregate_filter[inbound]: dst net Subnet_IP/28
aggregate_filter[outbound]: src net Subnet_IP/28
plugins: mysql[inbound], mysql[outbound]
sql_db: bwstat
sql_table: acct
sql_table_version: 1
sql_passwd: thepassword
sql_user: bwstat
sql_refresh_time: 5
sql_history: 1h
sql_history_roundoff: mh
I am using bwstat to have a look at the data.
Is my configuration wrong ? Any ideas what could cause the high amount
of traffic reported ?
Thanks in advance
--
Daniel Bramkamp
_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists
