Hi all, Many thanks to Paolo for his assistance. The issue I was running into was caused by having different IP addresses for BGP and Netflow. Adding a bgp_agent_map to correlate the BGP (id) to the Netflow (ip) fixed everything.
bgp_agent.map id=64.57.29.131 ip=64.57.20.200 Cheers, Ty > > Hi Ty, > > Thanks for the feedback. Is it possible to have a look at the issue > myself? If this is the case i would suggest to follow-up privately > then we take care to summarize findings on this list. > > Thanks, > Paolo > > On Tue, Jan 17, 2012 at 04:25:48PM -0500, Ty Bell wrote: > > Hi Paolo, > > > > No, IPv6 isn't enabled. We updated the router config and it is now > > presenting > > itself as 64.57.29.131 to pmacct (previously 64.57.21.173), but still no > > luck > > with the ASN: > > > > $ ../bin/pmacct -s > > SRC_AS DST_AS AS_PATH PACKETS BYTES > > 0 0 ^$ 672547035 > > 551092397221 > > > > For a total of: 1 entries > > > > > > Thanks, > > Ty > > > > > Hi Ty, > > > > > > Configuration looks allright at a first glance. Is the router also > > > presenting itself with the same '64.57.29.131' IP address to pmacct? > > > Just out of curiosity - is IPv6 enabled (--enable-ipv6)? Especially > > > if the first holds true, i'd be interested if i can have a look at > > > the issue. > > > > > > Cheers, > > > Paolo > > > > > > PS: the issue Borys was experiencing revealed to be unrelated to BGP > > > but rather to the configuration of aggregate_filter. > > > > > > On Wed, Jan 11, 2012 at 09:37:03AM -0500, Ty Bell wrote: > > > > Hello, > > > > > > > > I'm running into some difficulty getting nfacctd to display an ASN > > > > other > > > > than > > > > 0. Browsing the discussion list, I seem to be having an issue similar > > > > to > > > > Borys Owczarzak back at the end of November but I didn't see any > > > > resolution > > > > to his thread. When I run nfacctd with bgp_daemon_msglog, I receive a > > > > lot > > > > of > > > > information and I see the AS numbers in the logs. I started out using > > > > the > > > > MySQL plugin, but changed to memory thinking the 0 ASN might have been > > > > caused > > > > by an error in my MySQL configuration. Any insight is greatly > > > > appreciated! > > > > > > > > ###log snippet > > > > Jan 11 14:13:55 INFO ( default/core/BGP ): [Id: 64.57.29.131] u Prefix: > > > > '199.212.200.0/24' Path: '15290 2671 2669 2669 2669 2669 2669 2669' > > > > Comms: > > > > '11164:1170 11164:7880' EComms: '' LP: '100' MED: '0' Nexthop: '' > > > > Jan 11 14:13:55 INFO ( default/core/BGP ): [Id: 64.57.29.131] u Prefix: > > > > '199.212.150.0/24' Path: '15290 2671 2669 2669 2669 2669 2669 2669' > > > > Comms: > > > > '11164:1170 11164:7880' EComms: '' LP: '100' MED: '0' Nexthop: '' > > > > > > > > $ ../bin/pmacct -s > > > > SRC_AS DST_AS AS_PATH PACKETS > > > > BYTES > > > > 0 0 ^$ 184544 > > > > 139003749 > > > > > > > > For a total of: 1 entries > > > > > > > > > > > > ###nfacctd config > > > > daemonize: true > > > > pidfile: /var/run/nfacctd.pid > > > > logfile: /usr/local/etc/nfacctd.log > > > > nfacctd_disable_checks: true > > > > nfacctd_ip: 140.182.44.155 > > > > nfacctd_port: 2100 > > > > nfacctd_as_new: bgp > > > > > > > > bgp_daemon: true > > > > bgp_daemon_ip: 140.182.44.155 > > > > bgp_daemon_max_peers: 100 > > > > bgp_aspath_radius: 3 > > > > bgp_peer_src_as_type: bgp > > > > bgp_daemon_msglog: true > > > > > > > > plugins: memory > > > > aggregate: src_as, dst_as, as_path > > > > > > > > > > > > Thank you, > > > > Ty > > > > _______________________________________________ > > > > pmacct-discussion mailing list > > > > http://www.pmacct.net/#mailinglists > > > > > > _______________________________________________ > > > pmacct-discussion mailing list > > > http://www.pmacct.net/#mailinglists > > > > > _______________________________________________ > > pmacct-discussion mailing list > > http://www.pmacct.net/#mailinglists > > _______________________________________________ > pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
signature.asc
Description: Message signed with OpenPGP using GPGMail
_______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
