Hi Richard, Since this is Linux, traffic is passing through the box and you need input/output interfaces; was wondering if you already gave a try to the ULOG accounting daemon (uacctd). That seems to me the most natural way to achieve what you want. Let me know.
Cheers, Paolo On Mon, Jan 31, 2011 at 10:45:26PM +0200, Richard wrote: > Hi, > > > > I have successfully managed to setup pmacct with the mysql plugin to monitor > inbound and outbound traffic including source and destination ports and IPs > on a Linux firewall. > > I am currently splitting the traffic between two broadband routers so that > local sites are routed via the cheaper local-only bandwidth package. > > My setup is eth0 is connected to my local network and ppp1 and ppp2 are each > connected to a different ISP. > > My bandwidth logs would be infinitely more useful if I could track the > source and destination interfaces as well. > > E.g. Src_if: eth0, dst_if: ppp1 (outbound traffic to local site) > > Src_if: ppp0, dst_if: eth0 (inbound traffic from international site) > > Example routes: > > 51.160.0.0/12 dev ppp1 scope link > > 51.0.0.0/11 dev ppp1 scope link > > default dev ppp0 scope link > > > > Is there any way for me capture this information into my existing database? > > I would like to aggregate the information like this. > > aggregate[in]: dst_host, src_host, in_iface, out_iface, dst_port, src_port > > aggregate[out]: src_host, dst_host, in_iface, out_iface, src_port, dst_port > > > > Is this possible? > > > > Thanks, > > Richard > _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
