Discussion:
[pmacct-discussion] Aggregation
Fanen Ahua
2018-05-11 09:47:45 UTC
Permalink
Hi,

I’m quite new to pmacct, and I’m using the pcap interface to try to do some accounting on my homebrew router based on ubuntu 18.04.

I’m struggling to understand the meaning of some of configuration, even though there is a relatively good reference at http://wiki.pmacct.net/OfficialConfigKeys. I feel like it’s perhaps the lack of examples.

Anyway, I’m wondering:

• what aggregation does.
• When does it happen?
• Should I expect to see new tables created when it has run?

I’m trying to understand this so I can customise or develop a UI to enable me visualise the accounting data.

Thanks in advance,
Fanen.
Paolo Lucente
2018-05-12 13:32:51 UTC
Permalink
Hi Fanen,

Simplest would be to give you a try, even on your laptop with an active
internet connection. Do a:

shell> pmacctd -i <interface> -c src_host,dst_host,src_port,dst_port,proto

Query it in another terminal window with:

shell> pmacct -s

Then stop the first pmacctd instance and re-do as:

shell> pmacctd -i <interface> -c src_host,dst_host

Query it in the other terminal window with:

shell> pmacct -s

Granted -c sets the aggregation method and not specifying any plugins it
defaults to the memory table one, this should already answer several of
your questions. You can also read:

https://github.com/pmacct/pmacct/blob/master/QUICKSTART

Paolo
Hi,
I’m quite new to pmacct, and I’m using the pcap interface to try to do some accounting on my homebrew router based on ubuntu 18.04.
I’m struggling to understand the meaning of some of configuration, even though there is a relatively good reference at http://wiki.pmacct.net/OfficialConfigKeys. I feel like it’s perhaps the lack of examples.
• what aggregation does.
• When does it happen?
• Should I expect to see new tables created when it has run?
I’m trying to understand this so I can customise or develop a UI to enable me visualise the accounting data.
Thanks in advance,
Fanen.
_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists
_______________________________________________
pmacct-discussion mailing l
Fanen Ahua
2018-05-14 20:30:37 UTC
Permalink
Thanks Paolo.

I didn’t understand it because I skipped the section about Custom SQL tables because I *assumed* since I did not intend to use custom sql tables, I didn’t need any of the information contained there.

Seems like you always use a custom table (even when you use the example SQL files in the distribution), and aggregation is how you specify the columns you’re interested in.

Regards,
Fanen.

From: Paolo Lucente
Sent: 12 May 2018 14:35
To: pmacct-***@pmacct.net
Subject: Re: [pmacct-discussion] Aggregation


Hi Fanen,

Simplest would be to give you a try, even on your laptop with an active
internet connection. Do a:

shell> pmacctd -i <interface> -c src_host,dst_host,src_port,dst_port,proto

Query it in another terminal window with:

shell> pmacct -s

Then stop the first pmacctd instance and re-do as:

shell> pmacctd -i <interface> -c src_host,dst_host

Query it in the other terminal window with:

shell> pmacct -s

Granted -c sets the aggregation method and not specifying any plugins it
defaults to the memory table one, this should already answer several of
your questions. You can also read:

https://github.com/pmacct/pmacct/blob/master/QUICKSTART

Paolo
Post by Fanen Ahua
Hi,
I’m quite new to pmacct, and I’m using the pcap interface to try to do some accounting on my homebrew router based on ubuntu 18.04.
I’m struggling to understand the meaning of some of configuration, even though there is a relatively good reference at http://wiki.pmacct.net/OfficialConfigKeys. I feel like it’s perhaps the lack of examples.
• what aggregation does.
• When does it happen?
• Should I expect to see new tables created when it has run?
I’m trying to understand this so I can customise or develop a UI to enable me visualise the accounting data.
Thanks in advance,
Fanen.
_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists
Loading...