9ac97e8cdb
- A new network daemon, nfacctd, was introduced. It listens for Netflow V1/V5 packets coming from the network, and then processes data as pmacctd does. - pmacctd's IP fragmentation handling has been strongly enhanced.
14 lines
698 B
Plaintext
14 lines
698 B
Plaintext
pmacct is a set of network tools to gather IP traffic
|
|
informations (bytes counter and number of packets); aggregation
|
|
of statistics is done using simple primitives (MAC addresses,
|
|
source host, destination host, ports and ip protocols) that can
|
|
be used alone or combined together to form complex aggregation
|
|
methods; counters are either global or historical (broken at
|
|
fixed timeslots). Data is either stored in a memory table,
|
|
pulled to stdout or in a SQL database (MySQL or PostgreSQL).
|
|
Gathering packets off the wire is done either using pcap
|
|
library (and promiscuous mode of the listening interface) or
|
|
reading Netflow packets coming from the network.
|
|
|
|
WWW: http://www.ba.cnr.it/~paolo/pmacct/
|