I have pmacct running well except that IPv6 traffic is not being entered/aggregated into the db.
I do have some traffic being classified from address '::' which I think is actually all of my IPv6 traffic. pmacct was compiled using: ./configure --enable-ipv6 --enable-mysql --enable-64bit --no-create --no-recursion I've changed the dB's (btw, I use mysql table v6) src/dst address field lengths to 45 bytes. However, I'm not seeing any IPv6 data in the table as I would expect. My config file is down below. I can't seemed to find the answer - anyone know why I'm not seeing dB entries for IPv6 traffic? I've verified that IPv6 traffic is coming in on the interface (not vlan tagged btw). What is the syntax for IPv6 traffic within the networks_file file? Ex. 15169,2001:4860::/32? |0 | unknown | 0:0:0:0:0:0 | 0:0:0:0:0:0 |0 | 0 |0 | :: | 0.0.0.0 |0 |0 | ip|0 | 755805 | 878896760 |0 | 2009-03-23 14:00:00 | 2009-03-23 14:34:31 | ======================= daemonize: true interface: eth1 aggregate: src_net,src_as plugins: mysql networks_file: /home/netflow/pmacct-0.11.5/IPtoAS.data pcap_filter: src net not 10.0.0.0/8 and src net not 192.168.0.0/16 sql_db: pmacct sql_table: acct_v6 sql_table_version: 6 sql_passwd: <omitted> sql_user: <omitted> sql_refresh_time: 90 sql_host: localhost sql_history: 1w sql_history_roundoff: m mysql> describe acct_v6; +----------------+---------------------+------+-----+---------+-------+ | Field | Type | Null | Key | Default | Extra | +----------------+---------------------+------+-----+---------+-------+ | agent_id | int(2) unsigned | NO | PRI | | | | class_id | char(16) | NO | PRI | | | | mac_src | char(17) | NO | PRI | | | | mac_dst | char(17) | NO | PRI | | | | vlan | int(2) unsigned | NO | PRI | | | | as_src | int(2) unsigned | NO | PRI | | | | as_dst | int(2) unsigned | NO | PRI | | | | ip_src | char(45) | NO | PRI | | | | ip_dst | char(45) | NO | PRI | | | | src_port | int(2) unsigned | NO | PRI | | | | dst_port | int(2) unsigned | NO | PRI | | | | ip_proto | char(6) | NO | PRI | | | | tos | int(4) unsigned | NO | PRI | | | | packets | int(10) unsigned | NO | | | | | bytes | bigint(20) unsigned | NO | | | | | flows | int(10) unsigned | NO | | | | | stamp_inserted | datetime | NO | PRI | | | | stamp_updated | datetime | YES | | NULL | | +----------------+---------------------+------+-----+---------+-------+ -- Garry Peirce +1-207-561-3539 Network Analyst, ITS University of Maine System
_______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
