Hi Andre, My advice would be, depending on whether you want to go for either one or the other or both but keeping v4 and v6 segregated in different SQL tables:
== nfacctd.conf == ... plugins: v4, v6 aggregate_filter[v4]: ip aggregate_filter[v6]: ip6 ... == Keep in mind aggregate_filter accepts a tcpdump-style filter; for more info in this sense you can get a look to the tcpdump man page. Main gotchas are VLAN and MPLS tags. Cheers, Paolo On Sun, Jun 12, 2011 at 02:26:28PM +0200, Andre Keller wrote: > Hi > > > well I'm playing around successfully with pmacct. But I have one need > I'm not able to accomplish as of now. > > > I'm aggregating on src_as and dst_as and I would like to do that for > ipv6 and ipv4 separately. Looking at the flows (netflow v9) with > wireshark, it reveals there is a field IPVersion for each flow (04 for > IPv4 and 06 for IPv6). I can't however find a suitable corresponding > option in pmacct. I'm pretty sure someone has done this before as I > don't think this is a very uncommon information network engineers are > interested in. > > Can some shed light on how that could be accomplished with pmacct? > > > Regards Andr? > > _______________________________________________ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
