Hi Paolo, Ok - I believe I've done that. Anyway to be certain the version of pmacctd I'm running is the most current patch of 0.11.5? The behavior appears to be the same, although I'm not 100% sure I updated my version with CVS correctly.
-rwxr-xr-x 1 root root 354832 Mar 23 19:23 /usr/local/sbin/pmacctd The Makefile and config.log are attached. I do see a few 'undeclared identifiers' errors within the config.log. I enabled the debug facility but did not see anything that was in error. DEBUG ( ./test.conf ): plugin name/type: 'default'/'core'. DEBUG ( ./test.conf ): plugin name/type: 'default'/'mysql'. DEBUG ( ./test.conf ): daemonize:true DEBUG ( ./test.conf ): syslog:local2 DEBUG ( ./test.conf ): interface:eth1 DEBUG ( ./test.conf ): aggregate:src_net,src_as DEBUG ( ./test.conf ): networks_file:/home/netflow/pmacct-0.11.5/IPtoAS.data DEBUG ( ./test.conf ): pcap_filter:src net not 10.0.0.0/8 and src net not 192.168.0.0/16 DEBUG ( ./test.conf ): sql_db:pmacct DEBUG ( ./test.conf ): sql_table:acct_v6 DEBUG ( ./test.conf ): sql_table_version:6 DEBUG ( ./test.conf ): sql_passwd:<omitted> DEBUG ( ./test.conf ): sql_user:<omitted> DEBUG ( ./test.conf ): sql_refresh_time:90 DEBUG ( ./test.conf ): sql_host:localhost DEBUG ( ./test.conf ): sql_history:1w DEBUG ( ./test.conf ): sql_history_roundoff:m DEBUG ( ./test.conf ): debug:true WARN: debug is enabled; forking in background. Console logging will get lost. -- Garry Peirce University of Maine System > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On > Behalf Of Paolo Lucente > Sent: Monday, March 23, 2009 4:48 PM > To: [email protected] > Subject: Re: [pmacct-discussion] IPv6 traffic > > Hi Garry, > > The issue might lie with the use of the 'networks_file': an IPv6- > related > bug was in fact solved late 2008 and is currently committed in the CVS > version. I would suggest you to download the current CVS version (let > me > confirm it is solid) and see if the problem solves. Let me know. > > Cheers, > Paolo > > > On Mon, Mar 23, 2009 at 04:15:19PM -0400, Garry Peirce wrote: > > I have pmacct running well except that IPv6 traffic is not being > > entered/aggregated into the db. > > > > I do have some traffic being classified from address '::' which I > think is > > actually all of my IPv6 traffic. > > > > > > > > pmacct was compiled using: > > > > ./configure --enable-ipv6 --enable-mysql --enable-64bit --no-create > > --no-recursion > > > > I've changed the dB's (btw, I use mysql table v6) src/dst address > field > > lengths to 45 bytes. However, I'm not seeing any IPv6 data in the > table as > > I would expect. My config file is down below. > > > > > > > > I can't seemed to find the answer - anyone know why I'm not seeing dB > > entries for IPv6 traffic? I've verified that IPv6 traffic is coming > in on > > the interface (not vlan tagged btw). > > > > > > > > What is the syntax for IPv6 traffic within the networks_file file? > > > > Ex. 15169,2001:4860::/32? > > > > > > > > > > > > |0 | unknown | 0:0:0:0:0:0 | 0:0:0:0:0:0 |0 | 0 |0 | :: > | > > 0.0.0.0 |0 |0 | ip|0 | 755805 | 878896760 |0 | 2009-03-23 14:00:00 > | > > 2009-03-23 14:34:31 | > > > > > > > > ======================= > > > > daemonize: true > > > > interface: eth1 > > > > aggregate: src_net,src_as > > > > plugins: mysql > > > > networks_file: /home/netflow/pmacct-0.11.5/IPtoAS.data > > > > > > > > pcap_filter: src net not 10.0.0.0/8 and src net not 192.168.0.0/16 > > > > > > > > sql_db: pmacct > > > > sql_table: acct_v6 > > > > sql_table_version: 6 > > > > sql_passwd: <omitted> > > > > sql_user: <omitted> > > > > sql_refresh_time: 90 > > > > sql_host: localhost > > > > sql_history: 1w > > > > sql_history_roundoff: m > > > > > > > > mysql> describe acct_v6; > > > > +----------------+---------------------+------+-----+---------+------ > -+ > > > > | Field | Type | Null | Key | Default | Extra > | > > > > +----------------+---------------------+------+-----+---------+------ > -+ > > > > | agent_id | int(2) unsigned | NO | PRI | | > | > > > > | class_id | char(16) | NO | PRI | | > | > > > > | mac_src | char(17) | NO | PRI | | > | > > > > | mac_dst | char(17) | NO | PRI | | > | > > > > | vlan | int(2) unsigned | NO | PRI | | > | > > > > | as_src | int(2) unsigned | NO | PRI | | > | > > > > | as_dst | int(2) unsigned | NO | PRI | | > | > > > > | ip_src | char(45) | NO | PRI | | > | > > > > | ip_dst | char(45) | NO | PRI | | > | > > > > | src_port | int(2) unsigned | NO | PRI | | > | > > > > | dst_port | int(2) unsigned | NO | PRI | | > | > > > > | ip_proto | char(6) | NO | PRI | | > | > > > > | tos | int(4) unsigned | NO | PRI | | > | > > > > | packets | int(10) unsigned | NO | | | > | > > > > | bytes | bigint(20) unsigned | NO | | | > | > > > > | flows | int(10) unsigned | NO | | | > | > > > > | stamp_inserted | datetime | NO | PRI | | > | > > > > | stamp_updated | datetime | YES | | NULL | > | > > > > +----------------+---------------------+------+-----+---------+------ > -+ > > > > > > > > > > > > > > > > -- > > > > Garry Peirce +1-207-561-3539 > > > > Network Analyst, ITS > > > > University of Maine System > > > > > > > > > _______________________________________________ > > pmacct-discussion mailing list > > http://www.pmacct.net/#mailinglists > > _______________________________________________ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists
config.log
Description: Binary data
Makefile
Description: Binary data
_______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
