Hi Johan, Stick more to the example in section V of that same document, the one revolving around nfacctd (your case) and sfacctd. Two issues i can see are: 1) you should use nfacctd daemon (NetFlow collector) rather than pmacctd (which is the daemon to read data via libcap library, ie. off a mirror port) and 2) you should use memory, print or one of the SQL plugins rather than nfprobe (which is aimed at letting pmacct export NetFlow data to remote collectors. Hope this helps.
Cheers, Paolo On Thu, Jan 26, 2012 at 11:19:11AM +0200, johan lotter wrote: > Hi > > Am trying to get my Mikrotik Router Board to send traffic to pmacct > using Traffic-Flow which is compatible with NetFLow. > > Have configured my Router accordingly. > > And configured > > /etc/pmacct/pmacctd.conf > > using the below guide > > http://wiki.pmacct.net/OfficialExamples > > So it looks as follows: > > > ! > daemonize: true > interface: eth1 > aggregate: src_host, dst_host, src_port, dst_port, proto, tos > plugins: nfprobe > nfprobe_receiver: 192.168.88.150:2100 > nfprobe_version: 5 > ! nfprobe_engine: 1:1 > ! nfprobe_timeouts: tcp=120:maxlife=3600 > ! > ! networks_file: /path/to/networks.lst > ! classifiers: /path/to/classifiers/ > ! snaplen: 700 > !... > > What do I need to change? > > Thanks > > _______________________________________________ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
