Hi Chris, On Fri, Dec 02, 2011 at 10:19:35PM +0000, Chris Wilson wrote:
> I will probably do this soon as I'm intending to do more work on pmacct > development. However it would be great if Ubuntu would pick up more > recent versions of pmacct in their newer releases. I'm running the latest > release, Oneiric. Are you in touch with the package maintainer? No if this turn to be a different person than the Debian maintainer. I agree it's definite time to pick either a more recent 0.12 or best have them to switch to 0.14. > I'd particularly like to add some more identifying information to the > list of aggregation primitives, to help connect pmacct traffic logs with > Squid logs, to associate website names to them. However I was completely > confused about where to start on my first attempt to achieve this (adding > new primitives). I was wondering whether it would be easier to write a > classifier that would inspect the first packet of the stream and stuff > the TCP ISN into the classification field? Does that seem like a > reasonable approach? Interesting, definitely open to this and looking forward at knowing more. Actually it might even be that tagging is better candidate than classifiers or primitives. And if the information you are looking for is something that can be intercepted by a filter in tcpdump syntax you are also pretty much sorted already. Cheers, Paolo _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
