2004-07-01 16:29:39 +02:00
|
|
|
pmacct is a set of network tools to gather IP traffic
|
|
|
|
|
informations (bytes counter and number of packets); aggregation
|
|
|
|
|
of statistics is done using simple primitives (MAC addresses,
|
2004-01-27 16:51:34 +01:00
|
|
|
source host, destination host, ports and ip protocols) that can
|
|
|
|
|
be used alone or combined together to form complex aggregation
|
2004-07-01 16:29:39 +02:00
|
|
|
methods; counters are either global or historical (broken at
|
|
|
|
|
fixed timeslots). Data is either stored in a memory table,
|
|
|
|
|
pulled to stdout or in a SQL database (MySQL or PostgreSQL).
|
|
|
|
|
Gathering packets off the wire is done either using pcap
|
|
|
|
|
library (and promiscuous mode of the listening interface) or
|
|
|
|
|
reading Netflow packets coming from the network.
|
2003-05-12 18:17:50 +02:00
|
|
|
|
|
|
|
|
WWW: http://www.ba.cnr.it/~paolo/pmacct/
|
