Hi Goran,
For 200 Mbps I may recommend: compile pmacct with ZeroMQ support (see
QUICKSTART, grep for 'zeromq') and select the 'large' or 'xlarge' queue
profiles (plugin_pipe_zmq_profile). Let me know how it goes with this.
Paolo
On Sat, Jun 08, 2019 at 05:32:48PM +0200, Göran Bruns wrote:
> Am 08.06.2019 um 13:33 schrieb Paolo Lucente:
> >What version of pmacct are you using ('uacctd -V' would do)? What is the
> >input data rate (approx, no need to be specific) into NFLOG/uacctd? In
> >the order of Mbps, tens of Mbps, hundreds of Mbps, Gbps?
> >
> Hi Paolo,
>
> uacctd -V
> Linux NetFilter NFLOG Accounting Daemon, uacctd 1.7.3-git (20190418-00+c4)
>
> Arguments:
> '--prefix=/usr' '--build=x86_64-pc-linux-gnu' '--host=x86_64-pc-linux-gnu'
> '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--datadir=/usr/share'
> '--sysconfdir=/etc' '--localstatedir=/var/lib'
> '--disable-dependency-tracking' '--disable-silent-rules'
> '--docdir=/usr/share/doc/pmacct-1.7.3'
> '--htmldir=/usr/share/doc/pmacct-1.7.3/html' '--with-sysroot=/'
> '--libdir=/usr/lib64' '--enable-64bit' '--enable-bgp-bins'
> '--enable-bmp-bins' '--disable-geoip' '--disable-geoipv2' '--disable-jansson'
> '--disable-kafka' '--enable-l2' '--disable-plabel' '--disable-mongodb'
> '--enable-mysql' '--disable-ndpi' '--enable-nflog' '--disable-pgsql'
> '--disable-rabbitmq' '--enable-sqlite3' '--enable-st-bins'
> '--enable-traffic-bins' '--disable-zmq' '--disable-debug'
> 'build_alias=x86_64-pc-linux-gnu' 'host_alias=x86_64-pc-linux-gnu'
> 'CC=x86_64-pc-linux-gnu-gcc' 'CFLAGS=-O2 -pipe -march=native
> -fomit-frame-pointer -fno-stack-protector' 'LDFLAGS=-Wl,-O1 -Wl,--as-needed'
> 'CPPFLAGS= -DMYSQL_SERVER_VERSION=99999999'
> 'PKG_CONFIG_PATH=/usr/lib64/pkgconfig'
>
> Libs:
> libpcap version 1.8.1
> MySQL 5.7.16
> sqlite3 3.28.0
> netfilter_log
>
> System:
> Linux 4.19.48-gentoo #2 SMP Sat Jun 8 14:31:07 CEST 2019 x86_64
>
> Compiler:
> gcc 8.3.0
>
> For suggestions, critics, bugs, contact me: Paolo Lucente <[email protected]>.
>
>
> Data rate could be up to 200 Mbps. But I did not notice anything special when
> those messages appeared.
> Shall I truncate packets with --nflog-size or setup a buffer with
> --nflog-threshold to reduce the load on uacctd ?
>
>
> regards Göran
>
>
>
> _______________________________________________
> pmacct-discussion mailing list
> http://www.pmacct.net/#mailinglists
_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists
