Hi Daniel, a few questions for you: * are you getting the funky numbers in the web interface? If that's the case, can you please check also the underlying database to see whether the problem is generated by the application topped-over pmacct?
* is eth1 the interface where the PPP session to the ISP is established? If that's the case, just for testing purposes, would you give a try binding pmacct to eth2 instead? * if nothing of the above helps. Would you make each plugin writing to a separate table (ie. acct_in, acct_out) and check whether results get ok? * I'm assuming bridging is not involved on the "Gateway" box at all - it should make no sense unless there is some kind of a router (not in your graph) connecting to the ISP and holding the PPP session. Am I correct? Let me know. Cheers, Paolo On Tue, Feb 13, 2007 at 04:49:44PM +0100, Daniel Bramkamp wrote: > Hi, > > first of all, thanks for this nice tool. > > I am trying to setup accouting for a small subnet using pmacct. Right > now, I am only interested in total traffic per IP. I have setup pmacct > on a test box that utilizes a PPP uplink. On the test machine the > traffic reported seems reasonable. However, on the gateway machine for > the subnet I want to account traffic on, I get weird results. Within a > few minutes the traffic reaches Gigabytes, which I know is not the > case because I can compare the results to the data my ISP provides. > Unfortunately they only provide totals for in and out. > > +------- Host A > +---------+ | > ISP --- eth1 | Gateway | eth2 ---+------- Host B > +---------+ | > +------- Host C > > My ISP routes a /28 subnet through eth1 of the gateway machine pmacct > is running on. My pmacctd.conf looks like an example I found on the net: > > debug: false > interface: eth1 > daemonize: true > > aggregate[inbound]: dst_host > aggregate[outbound]: src_host > aggregate_filter[inbound]: dst net Subnet_IP/28 > aggregate_filter[outbound]: src net Subnet_IP/28 > plugins: mysql[inbound], mysql[outbound] > > sql_db: bwstat > sql_table: acct > sql_table_version: 1 > sql_passwd: thepassword > sql_user: bwstat > sql_refresh_time: 5 > sql_history: 1h > sql_history_roundoff: mh > > I am using bwstat to have a look at the data. > Is my configuration wrong ? Any ideas what could cause the high amount > of traffic reported ? > > Thanks in advance > -- > Daniel Bramkamp _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
