Comments (8)
let me explain a bit my setup. I have two 32bit gentoo systems A and B. Both systems reside on the same network setup doing different tasks so things are flexible if I need to change this setup. A runs pmacct with nfbrobe plugin only. B runs quagga and as-stats.
As a startup I followed this guide with some customizations for my setup like having quagga lively feeding pmacct.
I am testing as-stats on a fresh 32bit gentoo/rolling system. Just in case of possible issues with a 32bit system, I've also tested this on a fresh 64bit void-linux/rolling musl-libc with the exact same results.
from as-stats.
Are you sure your configuration is correct ?
If it is not, packets are drop silently, because they do not match your needs (watched host, watched vlan, watched ifindex)
The code is here: https://github.com/manuelkasper/AS-Stats/blob/master/bin/asstatd.pl#L655
from as-stats.
thank you for the useful feedback.
commenting out that return on line 655 did not made any difference.
I also tried a previous as-stats v1.5 with no success.
here is some further information on this 32bit SMP gentoo system:
Linux version 4.9.7-gentoo (root@aifnis) (gcc version 5.4.0 (Gentoo 5.4.0-r2 p1.2, pie-0.6.5) ) #1 SMP Thu Feb 2 13:34:59 EET 2017
rrdtool-1.6.0-r1
File-Find-Rule-0.340.0 / http://search.cpan.org/dist/File-Find-Rule/
File-Find-Rule-Perl-1.130.0 / http://search.cpan.org/dist/File-Find-Rule-Perl/
Net-sFlow-0.11 / http://search.cpan.org/dist/Net-sFlow/
from as-stats.
I uncommented some print statements on the asstatsd.pl and got the following:
DEBUG Sampling Rate for 10.2.19.1_0 is IN: 1 | OUT: 1
Template ID 1024 from 0/10.2.19.1 does not (yet) exist
Template ID 1024 from 0/10.2.19.1 does not (yet) exist
Template ID 1024 from 0/10.2.19.1 does not (yet) exist
Template ID 1024 from 0/10.2.19.1 does not (yet) exist
Template ID 1024 from 0/10.2.19.1 does not (yet) exist
Template ID 1024 from 0/10.2.19.1 does not (yet) exist
Template ID 1024 from 0/10.2.19.1 does not (yet) exist
Template ID 1024 from 0/10.2.19.1 does not (yet) exist
Template ID 1024 from 0/10.2.19.1 does not (yet) exist
Template ID 1024 from 0/10.2.19.1 does not (yet) exist
Template ID 1024 from 0/10.2.19.1 does not (yet) exist
Template ID 1024 from 0/10.2.19.1 does not (yet) exist
Template ID 1024 from 0/10.2.19.1 does not (yet) exist
Template ID 1024 from 0/10.2.19.1 does not (yet) exist
Template ID 1024 from 0/10.2.19.1 does not (yet) exist
Template ID 1024 from 0/10.2.19.1 does not (yet) exist
Template ID 1024 from 0/10.2.19.1 does not (yet) exist
Updated template ID 1024 (source ID 0, from 10.2.19.1)
Updated template ID 1025 (source ID 0, from 10.2.19.1)
Updated template ID 1024 (source ID 0, from 10.2.19.1)
Updated template ID 1025 (source ID 0, from 10.2.19.1)
I forgot to mention that this setup runs on a IP/BGP/AS private 10.0.0.0/8 AWMN network.
I also commented out line 628 without any change on this issue.
More information about my setup can be found here
from as-stats.
Can you provide your configuration, as well as a pcap fed with a couple of flow samples ?
from as-stats.
pmacct/nfprobe config:
daemonize: false
promisc: true
plugin_buffer_size: 10240
plugin_pipe_size: 10240000
pcap_filter: net 10.0.0.0/8
interface: eth0
plugins: nfprobe
nfprobe_receiver: 10.2.19.18:9000
nfprobe_version:9
nfacctd_net: fallback
nfacctd_as_new: fallback
nfprobe_peer_as: true
sfprobe_peer_as: true
bgp_daemon_pipe_size: 1310710
bgp_daemon: true
bgp_daemon_ip: 10.2.19.4
bgp_daemon_id: 10.2.19.4
bgp_agent_map: /etc/pmacct/agent_to_peer.map
bgp_daemon_port: 17917
bgp_follow_nexthop: 10.2.19.0/24, 10.2.146.0/24, 10.0.0.0/8
aggregate: src_host, dst_host, src_port, dst_port, src_as, dst_as, as_path, peer_src_as, peer_dst_as, proto
/etc/pmacct/agent_to_peer.map :
bgp_ip=10.2.19.1 ip=10.0.0.0/8
bgp_ip=10.2.19.3 ip=10.0.0.0/8
from as-stats.
I had some progress:
DEBUG Sampling Rate for 10.2.19.1_0 is IN: 1 | OUT: 1
Template ID 1024 from 0/10.2.19.1 does not (yet) exist
Template ID 1024 from 0/10.2.19.1 does not (yet) exist
Template ID 1024 from 0/10.2.19.1 does not (yet) exist
Template ID 1024 from 0/10.2.19.1 does not (yet) exist
Template ID 1024 from 0/10.2.19.1 does not (yet) exist
Template ID 1024 from 0/10.2.19.1 does not (yet) exist
Updated template ID 1024 (source ID 0, from 10.2.19.1)
Updated template ID 1025 (source ID 0, from 10.2.19.1)
0 => 0 (40 octets, version 4, snmpin 0, snmpout 0)
2493: flushing data for AS 0 (1488059548)
2493: creating RRD file for AS 0
0 => 0 (60 octets, version 4, snmpin 0, snmpout 0)
0 => 0 (40 octets, version 4, snmpin 0, snmpout 0)
0 => 0 (60 octets, version 4, snmpin 0, snmpout 0)
0 => 0 (94 octets, version 4, snmpin 0, snmpout 0)
0 => 0 (78 octets, version 4, snmpin 0, snmpout 0)
0 => 0 (143 octets, version 4, snmpin 0, snmpout 0)
0 => 0 (65 octets, version 4, snmpin 0, snmpout 0)
0 => 0 (139 octets, version 4, snmpin 0, snmpout 0)
my conf/knownlinks :
10.2.19.1 0 SupperQuagga SupperQuagga ABCDEF 1
and some more progress:
DEBUG Sampling Rate for 10.2.19.1_0 is IN: 1 | OUT: 1
Updated template ID 1024 (source ID 0, from 10.2.19.1)
Updated template ID 1025 (source ID 0, from 10.2.19.1)
0 => 7817 (40 octets, version 4, snmpin 0, snmpout 0)
7817 => 0 (132 octets, version 4, snmpin 0, snmpout 0)
0 => 7817 (40 octets, version 4, snmpin 0, snmpout 0)
7817 => 0 (60 octets, version 4, snmpin 0, snmpout 0)
0 => 13101 (40 octets, version 4, snmpin 0, snmpout 0)
13101 => 0 (52 octets, version 4, snmpin 0, snmpout 0)
0 => 22128 (80 octets, version 4, snmpin 0, snmpout 0)
0 => 9474 (40 octets, version 4, snmpin 0, snmpout 0)
9474 => 0 (60 octets, version 4, snmpin 0, snmpout 0)
0 => 10030 (40 octets, version 4, snmpin 0, snmpout 0)
10030 => 0 (60 octets, version 4, snmpin 0, snmpout 0)
0 => 7817 (40 octets, version 4, snmpin 0, snmpout 0)
7817 => 0 (60 octets, version 4, snmpin 0, snmpout 0)
from as-stats.
let me shamefully close this "ticket" as invalid, apologizing for the "lost cycles", since as-stats properly does whatever was designed to do, though quite silently.
being a n00b on this field, I am still exploring and learning its wonders. You may see some of my efforts here
thank you dearly for offering such a handy little tool to the open-source community.
from as-stats.
Related Issues (20)
- How can I remove an old unused link? HOT 1
- AS-Stats not working with sFlow data from Brocade/Extreme NetIron routers HOT 2
- As-stats for 100g link HOT 1
- Incorrect Graphs !! HOT 11
- Sudden php errors !! HOT 1
- "inet_pton" is not exported by the Socket module
- no sFlowSample->{'HeaderBin'} in sflow packets
- Centos Install not working HOT 1
- Unable to install rrdtool-dev HOT 2
- ipfix : Use of uninitialized value in addition (+) at /usr/local/AS-Stats/bin/asstatd.pl line 446. HOT 1
- linkgraph not show image HOT 1
- no Huawei NE series support HOT 1
- Multiple routers > duplicate ifIndex'es > RRD graphs wrong HOT 9
- Error when run rrd-extractstats.pl HOT 2
- gaps in graphs HOT 1
- Can't use bareword ("as_list") as a HASH ref while "strict refs" in use at /var/www/localhost/htdocs/AS-Stats/bin/rrd-extractstats.pl line 57. HOT 3
- . in knowlinks
- rrd-extractstats.pl needs sort on %knownlinks & requires statsfile to be deleted if knownlinks file has changed HOT 1
- After adding new link I get issues when running rrd-extratstats.pl HOT 1
- Do not create files in the rrd directory HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from as-stats.