Vyatta version of pmacct
Details
Feb 8 2019
Jan 3 2019
Jan 1 2019
Dec 21 2018
Dec 5 2018
Nov 27 2018
Nov 20 2018
Nov 13 2018
Nov 9 2018
@vtsingaras I merged it in to our repo.
@syncer i see we have no crux branch for pmacct i slacked @dmbaturin
Nov 6 2018
Nov 4 2018
@vtsingaras I see it is merged in upstream, try to merge in vyos asap.
Nov 1 2018
This patch fixes in my case crashes that would result from big NFLOG packets (32K in my case)
Oct 29 2018
Oct 24 2018
Oct 15 2018
Oct 13 2018
Oct 9 2018
Sep 2 2018
Sep 1 2018
Done!
snaplen (-L) [GLOBAL, NO_NFACCTD] Desc specifies the maximum number of bytes to capture for each packet. This directive has key importance when enabling both classification and connection tracking engines. In fact, some protocols (mostly text-based eg.: RTSP, SIP, etc.) benefit of extra bytes because they give more chances to successfully track data streams spawned by control channel. But it must be also noted that capturing larger packet portion require more resources. The right value need to be traded-off. In case classification is enabled, values under 200 bytes are often meaningless. 500-750 bytes are enough even for text based protocols. Default snaplen values are ok if classification is disabled. For uacctd daemon, this option doesn't apply to packet snapshot length but rather to the Netlink socket read buffer size. This should be reasonably large - at least 4KB, which is the default value. For large uacctd_nl_size values snaplen could be further increased.
It just died with this log:
You could also alter the file /etc/default/uacctd and add -d into DAEMON_OPTS and restart flow-acounting
@panachoi maybe this upgrade helps
Aug 22 2018
Just updated to build from 20180821, and its still stopping; I'm glad that I'm not the only one seeing this, so it probably is some kind of bug. Again, nothing in the log at all, just the startup:
Aug 20 2018
It stops here, too. Why? I have no idea, yet
Aug 14 2018
Now using the following config, unfortunately my routers don't have that much traffic:
Jul 11 2018
Sure. The "best" way to visualize flow data is to install nfdump/nfsen:
Jul 10 2018
Hi @panachoi thanks for the info and sharing your config. I was always interested in Netflow (what is it, what can I do with it). I'm happy to look into this but could you tell me any software which I can use to display (graphically would be the best) the flow result?
Dec 22 2017
Oct 28 2017
I added new pmacct package (https://github.com/vyos/pmacct/tree/current) but now we also need to update vyatta-netflow package.
Oct 20 2017
@UnicronNL can you pickup this from @dmbaturin