Thanks for the reply, i disable the daemon option and here are the error messages, i cannot put src_ip and src_as together?
INFO ( default/mysql ): 131070 bytes are available to address shared memory segment; buffer size is 128 bytes. INFO ( default/mysql ): Trying to allocate a shared memory segment of 2097024 bytes. INFO ( default/core ): waiting for NetFlow data on 0.0.0.0:10000 ERROR ( default/mysql ): SQL tables < v6 are unable to mix IP addresses and AS numbers (ie. src_ip, src_as). INFO: connection lost to 'default-mysql'; closing connection. On Fri, Nov 13, 2009 at 4:03 PM, Paolo Lucente <[email protected]> wrote: > Hi, > > It seems the daemon would like to complain about something but you > send it to background (daemonize: true). Perhaps comment the daemonize > line out and set debug to true (debug: true) and see what's the story. > Put it like that, it could be a number of things. > > Cheers, > Paolo > > On Fri, Nov 13, 2009 at 02:56:15PM -0600, fedora fedora wrote: > > Hello, > > > > I am trying to get pmacct to pass the received the netflow data to my > > customized mysql table, the table name is "test" and has the following > > structure, > > > > mysql> desc test; > > +----------------+---------------------+------+-----+---------+-------+ > > | Field | Type | Null | Key | Default | Extra | > > +----------------+---------------------+------+-----+---------+-------+ > > | as_src | int(4) unsigned | NO | PRI | NULL | | > > | as_dst | int(4) unsigned | NO | PRI | NULL | | > > | ip_src | char(15) | NO | PRI | NULL | | > > | ip_dst | char(15) | NO | PRI | NULL | | > > | src_port | int(2) unsigned | NO | PRI | NULL | | > > | dst_port | int(2) unsigned | NO | PRI | NULL | | > > | tcp_flags | int(4) unsigned | NO | | NULL | | > > | ip_proto | char(6) | NO | PRI | NULL | | > > | tos | int(4) unsigned | NO | PRI | NULL | | > > | packets | int(10) unsigned | NO | | NULL | | > > | bytes | bigint(20) unsigned | NO | | NULL | | > > | flows | int(10) unsigned | NO | | NULL | | > > | stamp_inserted | datetime | NO | PRI | NULL | | > > | stamp_updated | datetime | YES | | NULL | | > > +----------------+---------------------+------+-----+---------+-------+ > > > > The pmacct was configued with mysql enabled, and my pmacct config file is > > like this: > > > > ++ > > daemonize: true > > interface: eth1 > > nfacctd_port: 10000 #netflow are being sent on port 10000 > > aggregate: > > > src_host,dst_host,src_port,dst_port,tos,proto,src_as,dst_as,flows,tcpflags > > plugins: mysql > > sql_optimize_clauses: true > > sql_table: test > > ++ > > > > Then I ran "nfacctd -f ./pm.conf" but nothing happens, and a "ps -ef | > egrep > > nfacct" shows nfacctd is not running. > > > > I noticed if i change "aggregate: > > > src_host,dst_host,src_port,dst_port,tos,proto,src_as,dst_as,flows,tcpflags" > > to "aggregate: src_host, tcpflags", i will get something in the test > table, > > but apparently this is not what I wanted. > > > > Can someone tell me what could be wrong? > > > _______________________________________________ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists >
_______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
