Hi Paolo, thank you for the hint.
It works if I use: vlan and ((vlan 365 or vlan 1337) and (dst net 192.76.141.0/24 or dst net 194.55.246.0/23 or dst net 195.246.160/19 or dst net 88.215.224.0/19 or dst net 62.93.212.0/23 or dst net 62.93.246.0/23 or dst net 88.215.192.0/19)) Well, but what if I also want to filter by VLAN. The following filters do not work :\ ((vlan 365 or vlan 1337) and (dst net 192.76.141.0/24 or dst net 194.55.246.0/23 or dst net 195.246.160/19 or dst net 88.215.224.0/19 or dst net 62.93.212.0/23 or dst net 62.93.246.0/23 or dst net 88.215.192.0/19)) vlan and ((vlan 365 or vlan 1337) and (dst net 192.76.141.0/24 or dst net 194.55.246.0/23 or dst net 195.246.160/19 or dst net 88.215.224.0/19 or dst net 62.93.212.0/23 or dst net 62.93.246.0/23 or dst net 88.215.192.0/19)) Cheers, Bernd > > Hi Bernd, > > You appear to be using VLANs - please try amending your 'aggregate_filter' > lines in the following fashion: 'vlan and <existing statement>'. Let me know > whether that solves the issue. > > Cheers, > Paolo > > On Wed, Jun 08, 2011 at 10:26:57AM +0000, Bernd Bornkessel wrote: > > Hi, > > > > we want to you sfacctd for accounting and billing purposes in our network. > I set up a test installation with a router sending SFlow and a Debian 6.0 > system with pmacct-0.14.0rc1 and a mysql backend as the collector. > > > > Everything works fine as long as I don't use the aggregate filters. > Without aggregate filtering sfacctd will write the data to the database. > > But as we need to have filters for our own networks, I tried to use the > aggregate filters. But as soon as I activate them, there will be no data > written to the database. > > > > The problem exists with all backends (mysql, memory, sqlite etc.). Thus I > assume the filters not matching. But according to the sent flows and the > configured filters, there should be flow data afer filtering. > > > > [ ... ] > > > _______________________________________________ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
