Pmacct

From Initech Technical Wiki
Revision as of 21:05, 18 October 2019 by Timprice (talk | contribs) (Created page with " <pre> debug: false daemonize: false pidfile: /var/run/nfacctd.pid print_cache_entries: 1000000 #nfacctd_pipe_size: 2048000000 #nfacctd_disable_checks: true plugin_pipe_si...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search


debug: false
daemonize: false
pidfile: /var/run/nfacctd.pid

print_cache_entries: 1000000

#nfacctd_pipe_size: 2048000000
#nfacctd_disable_checks: true

plugin_pipe_size: 10240000
plugin_buffer_size: 10240

plugins: print[nfacct]
aggregate [nfacct]: tcpflags,tos,proto,src_host,dst_host,src_as,dst_as,src_port,dst_port,in_iface,out_iface,peer_src_ip
print_output_file[nfacct]: /tmp/nfacctd.json
print_output[nfacct]: json
print_history[nfacct]: 1m
print_history_roundoff[nfacct]: m
print_refresh_time[nfacct]: 60
print_trigger_exec[nfacct]: /usr/local/bin/nfacct-clickhouse-import
#pre_tag_map[nfacct]: /etc/pmacct/pretag.map
#pre_tag_filter[nfacct]: !666

#aggregate [nfacct-ip]: src_host,dst_host,peer_src_ip
#print_output_file[nfacct-ip]: /tmp/nfacctd-ip.json
#print_output[nfacct-ip]: json
#print_history[nfacct-ip]: 1m
#print_history_roundoff[nfacct-ip]: m
#print_refresh_time[nfacct-ip]: 60
#print_trigger_exec[nfacct-ip]: /usr/local/bin/nfacct-ip-clickhouse-import
#
#aggregate [nfacct-as]: src_as,dst_as,peer_src_ip
#print_output_file[nfacct-as]: /tmp/nfacctd-as.json
#print_output[nfacct-as]: json
#print_history[nfacct-as]: 1m
#print_history_roundoff[nfacct-as]: m
#print_refresh_time[nfacct-as]: 60
#print_trigger_exec[nfacct-as]: /usr/local/bin/nfacct-as-clickhouse-import

timestamps_since_epoch: true
timestamps_secs: true
#timestamps_rfc3339: true