github.com/vyos-legacy/pmacct commits | Ecosyste.ms: OpenCollective

* nfacctd: introduced IPFIX replication capability

1df698d0b0a486e5371351133108d68f59778f9e authored over 13 years ago by Paolo Lucente <[email protected]>

* nfprobe plugin: misc fixes to initial IPFIX export implementation

abce3d1067adf0da83063ccd67656bf41e148567 authored over 13 years ago by Paolo Lucente <[email protected]>

* nfprobe plugin: initial IPFIX export implementation. It is called via a

'nfprobe_version: 10' configuration directive. Supports both pmacctd and
uacctd.
* Updated ex...

ced9f2825bab885cc81ad156bbd6f9d1a045223c authored over 13 years ago by Paolo Lucente <[email protected]>

* nfacctd: IPFIX templates including PENs are now supported

63df379fada9201b7d3c3f15c25d8c310afcf89a authored over 13 years ago by Paolo Lucente <[email protected]>

* fix, documentation: missing 'in', input interface, lookup key added.

e1a064c3bf5cdd0a46e684d3eac0ac179c0253ac authored over 13 years ago by Paolo Lucente <[email protected]>

* nfacctd: initial IPFIX collector implementation

67a5eaf0696583df6dc1c949ec69b512a6fcdfc8 authored over 13 years ago by Paolo Lucente <[email protected]>

* sfacctd: f_agent now points sFlow Agent ID instead of source IP address;

among the other things, this allows to compare BGP source IP address/BGP
Router-ID against th...

291bcfaf62eb91e2eaba5c4577e653c3896c2565 authored almost 14 years ago by Paolo Lucente <[email protected]>

* sfacctd: BGP-related primitives (AS Path, local preference, communities,

etc.) are now read from sFlow Extended Gateway object if sfacctd_as_new
is set to false (defa...

81b3fe38c9e54f96eaf1eb2e29b4ff5bb3e61404 authored almost 14 years ago by Paolo Lucente <[email protected]>

* Refresh build system

0ff123727d4901940aa734c2ee2bf2fe1f1943d4 authored almost 14 years ago by Paolo Lucente <[email protected]>

* Refresh build system

64b1a48652398a13ed5d835ac37ea2a2c7b7e197 authored almost 14 years ago by Paolo Lucente <[email protected]>

* Rolled version counters

58de7db8e89b83806d3eadae9652e201050743c0 authored almost 14 years ago by Paolo Lucente <[email protected]>

* Documentation updated

5ab58fee558fdef24530d945e0d68fa4fb454307 authored almost 14 years ago by Paolo Lucente <[email protected]>

* fix, xflow_status.c: status entries were not properly linked to the hash

conflict chain resulting in a minor memory leak.
* BGP daemon: BGP peer information is now link...

48540f6017b7d80232f29ebc3ff579452605a2c7 authored almost 14 years ago by Paolo Lucente <[email protected]>

* fix, nfacctd: added check to verify validity of internal status object

for a given NetFlow agent. Only affected version is 0.12.5-cvs (cont.d)

f52fdb852746a2de8d1419cba9b2c8679e3b0073 authored almost 14 years ago by Paolo Lucente <[email protected]>

* fix, nfacctd: added check to verify validity of internal status object

for a given NetFlow agent. Only affected version is 0.12.5-cvs.
* fix, nfacctd, sfacctd: daemon...

710c5a6808b8148f24f7be0747eac2e41a5e4e29 authored almost 14 years ago by Paolo Lucente <[email protected]>

* fix, sql_common.c: increased buffer size available for sql_table_schema

from 1KB to 8KB.

62eb7e5686fae37a4df6bbcc21ee568bcf7a5036 authored almost 14 years ago by Paolo Lucente <[email protected]>

* BGP daemon: introduced support for IPv6 transport of BGP messaging

* bgp_agent_map has been improved to allow mapping of NetFlow/sFlow agents
making use of IPv6 t...

8d13a71319044f3480f6d680187bafd900a98abc authored almost 14 years ago by Paolo Lucente <[email protected]>

* nfacctd: introduced support for 'new' TCP/UDP source/destination ports

(field types 180, 181, 182, 183), as per IPFIX standard, basing on the
L4 protocol value (if ...

c6b9e2705eb8fcb0d6c745ebbb20c17e74c1d4c4 authored almost 14 years ago by Paolo Lucente <[email protected]>

* nfacctd: introduced support for NAT L3/L4 field values via xlate_src and

xlate_dst configuration directives. Implementation follows IPFIX standard
for IPv4 and IPv6 (...

e5467c97ff549653b100f9c16016fd32a479e881 authored almost 14 years ago by Paolo Lucente <[email protected]>

* fix, nfacctd, sfacctd: aggregate_filter was not catching L2 primitives

(VLAN, MAC addresses) when performing egress measurements.

cf30ddd953ac2d265e4d77b47c68557e9adcaae4 authored almost 14 years ago by Paolo Lucente <[email protected]>

* nfprobe: encoding of NetFlow v9 option scope has been improved; nfprobe

source IPv4/IPv6 address, if specified via nfprobe_source_ip directive,
is now being written
...

c64ee67bd573b81ab6cca39a184e062182cb7f29 authored almost 14 years ago by Paolo Lucente <[email protected]>

* nfprobe: introduced support for application classification via NetFlow v9

field type #95 (application ID) and application name table option. This
mechanism aligns with...

28f7e57119b2d3033bc6e6e6d463427c32d0ae87 authored almost 14 years ago by Paolo Lucente <[email protected]>

* nfacctd: introduced support for application classification via NetFlow v9

field type #95 (application ID) and application name table option. This
mechanism aligns with...

e2758037e081a167b3c29708803f62b954145c6c authored almost 14 years ago by Paolo Lucente <[email protected]>

* fix, util.c: string copies in trim_spaces(), trim_all_spaces() and

strip_quotes() have been rewritten more safely. Patch is courtesy of
Dmitry Koplovich.

6c16788f0fd4497a4a23c9e18a83ac17f6944eef authored almost 14 years ago by Paolo Lucente <[email protected]>

* [ns]facctd_net: directive can now be specified per-plugin; documentation

updated.

cd41465d1c3119bbe545bbdd1740cb03dec79bf6 authored about 14 years ago by Paolo Lucente <[email protected]>

* nfprobe: egress flowset, examples documentation and enabled compatibility

with Cisco (no use of OUT_BYTES, OUT_OUT_PACKETS)
* nfacctd: added support for egress datalink ...

9e9aa60199cee266f0aba1c4a94fa78e5abe3a6a authored about 14 years ago by Paolo Lucente <[email protected]>

* nfprobe: introduced egress IPv4/IPv6 NetFlow v9 flowsets

b5b2efaf65620bf3b03733e32b940ec82a867887 authored about 14 years ago by Paolo Lucente <[email protected]>

* nfprobe: introducing egress IPv4/IPv6 NetFlow v9 templates

* fixed naming convention for some mispelled examples documentation. Thanks
to Xavier Vitard fo...

cd425e91fcfc213d90fead4a320e14a2db59f2bc authored about 14 years ago by Paolo Lucente <[email protected]>

* sfacctd: interface format merged back into interface value fields so to

ease keeping track of discards (and discard reasons) and multicast fanout
* nfacctd: fixed typo...

f5f7d5bd73ba62ece34684f5b1157fdf854833b3 authored about 14 years ago by Paolo Lucente <[email protected]>

* MySQL, SQLite3 plugins: sql table version 8 issued to provide common

naming convention when mapping primitives to database fields among the
supported RDBMS base. ...

467868d68722431bd47f3daa8a6450f07c5aad64 authored about 14 years ago by Paolo Lucente <[email protected]>

* pmacct client: numeric variables output converted to unsigned from signed

* nfacctd_net, sfacctd_net: default value changed from null (and related
error message) to 'net...

1f1eb0d62520ccf0ed9ff3203636bfaf3cb850f3 authored about 14 years ago by Paolo Lucente <[email protected]>

* nfacctd, sfacctd: aggregate_filter can now filter against TCP flags

81fb7d8e49f1151a905affc26f307d79d0f46e3a authored about 14 years ago by Paolo Lucente <[email protected]>

* Refreshed building system (retry)

15f16b4936db9742e8614bbc20756f0ca1b02ec9 authored about 14 years ago by Paolo Lucente <[email protected]>

* Refreshed building system (retry)

6ad68222d8615bba41d2c1af469b76ae9f8f8ed0 authored about 14 years ago by Paolo Lucente <[email protected]>

* Refreshed building system

* Rolled version counters

0a3e20954025df304fef628f22453131d5f43256 authored about 14 years ago by Paolo Lucente <[email protected]>

* print plugin: support for interfaces and network masks has been added.

Numeric variables output converted to unsigned from signed.
* bgp_table.h: spelling error corre...

894342a61445e83d3b400ccc688a708d5d168ea3 authored about 14 years ago by Paolo Lucente <[email protected]>

* Updated ChangeLog document

da2d4aa977c209d180da4e7e8619f9ada651740a authored about 14 years ago by Paolo Lucente <[email protected]>

* nfprobe: added support for export direction field (NetFlow v9 field type

#61); its value, 0=ingress 1=egress, is determined via nfprobe_direction
configuration direct...

8f5e79ca8d8b56a782be1a4a484b21606bcd8efb authored about 14 years ago by Paolo Lucente <[email protected]>

* nfprobe: record direction information, if available, for later use

* bgp daemon: fixed memory leak. Only affected version is 0.12.4-cvs

f536296c067cfd07407cd0aff2ec0174e90410be authored about 14 years ago by Paolo Lucente <[email protected]>

* BGP daemon: further effort to optimize RIB resources consumption; updated

documentation.

e27f80eea8a9a47fa5f45628ccff167fc87c720f authored about 14 years ago by Paolo Lucente <[email protected]>

* BGP daemon: further effort to optimize RIB resources consumption; updated

documentation.

3a05936afba5ba9417ee09c3f36828654f4210a1 authored about 14 years ago by Paolo Lucente <[email protected]>

* BGP daemon thread: documentation on memory dimensioning

119e1892f1c18cdfd3fa97327e08fbedbeead82a authored about 14 years ago by Paolo Lucente <[email protected]>

* nfacctd: introduced support for Cisco ASA bytes counter, NetFlow v9 field

type #85.

c9594ad2f3fcc75615a9d4bdf6965ae3d8d59269 authored about 14 years ago by Paolo Lucente <[email protected]>

* BGP daemon: effort to optimize RIB resources consumption; new information

model encompasses a shared RIB, shared attributes and per-peer routing
information. Introduce...

7101eafa299fe9923c6ff640b3fa660daa1c9718 authored about 14 years ago by Paolo Lucente <[email protected]>

* BGP daemon: initial effort to optimize RIB resources consumption (cont.d)

9850ff754cb27597d89c4272ee985d4120d95e98 authored about 14 years ago by Paolo Lucente <[email protected]>

* fix, nfv9_template.c: ignoring unsupported field types; improved template

logging.

a81a12dfbdb1c8c36d11e534867fd3ab2e12f5c1 authored about 14 years ago by Paolo Lucente <[email protected]>

* BGP daemon: initial effort to optimize RIB resources consumption (cont.d)

f558d9103f40febb7031e1952a8c573e344d8ab5 authored about 14 years ago by Paolo Lucente <[email protected]>

* BGP daemon: initial effort to optimize RIB resources consumption (cont.d)

addbaaede5886b2b9362f37a8e4a72f990838926 authored about 14 years ago by Paolo Lucente <[email protected]>

* BGP daemon: initial effort to optimize RIB resources consumption

9cb04b85a579368ba1f7b9cec720cd534bc7d103 authored about 14 years ago by Paolo Lucente <[email protected]>

* nfacctd: improved flow recognition heuristics

d044b632879119401de29fe4e7a4e20266299691 authored about 14 years ago by Paolo Lucente <[email protected]>

* Rolled version counters

14df75e078b26324f2a11c984853c7dcbd7dc994 authored about 14 years ago by Paolo Lucente <[email protected]>

* sfacctd: added support for egress VLAN and CoS (802.1p) information

7aa25f1aaa9ec5a5af1e8d06b85e9a8307022274 authored about 14 years ago by Paolo Lucente <[email protected]>

* fix, sfprobe: Counter Samples index was uninitialized

08a8026c30eb018393bf88d8b730642a66f343c2 authored about 14 years ago by Paolo Lucente <[email protected]>

* Documentation updated

c9a0f1fad2f55da4e087d47faa30b5f40777ce49 authored about 14 years ago by Paolo Lucente <[email protected]>

* fix, nfprobe: nfprobe_ifindex and nfprobe_direction were not working with

tag/tag2 setup and NetFlow v5 export due to tags suppression.
* fix, sfprobe: sampler process m...

920975783101f301918f962786331eb5341ff692 authored about 14 years ago by Paolo Lucente <[email protected]>

* fix, bgp.c: CPU hog issue was caused by missing cleanup of the select()

descriptors vector.
* fix, nfprobe: nfprobe_ifindex value was incorrectly evaluated
* fix, sfpr...

bf315b210ad8a85d44b31f43df825d5303ccd03b authored about 14 years ago by Paolo Lucente <[email protected]>

* sfprobe: added support for multi-interface Counter Samples

627930195ba24f64b71964fc33cd65246651ff01 authored about 14 years ago by Paolo Lucente <[email protected]>

* fix, sfprobe_plugin.c: counter sample showing wrong ifindex when in semi-

dynamic mode.

a73cf6cee7f6efde901fca06fb50fcd96905f747 authored about 14 years ago by Paolo Lucente <[email protected]>

* [ns]fprobe_ifindex now supports semi-dynamic lookups against either 'tag'

or 'tag2'. This is in addition to previously implemented static ifIndex
support. Updated docs...

ce989e742d2bd65744d115390e526d50372d89f1 authored about 14 years ago by Paolo Lucente <[email protected]>

* nfprobe, sfprobe: introducing concept of traffic direction. As a result,

[ns]fprobe_direction and [ns]fprobe_ifindex configuration directives have
been implemented.
*...

344f77eed5f816503ce9533bee47b4b63cb8a526 authored about 14 years ago by Paolo Lucente <[email protected]>

* cfg_handlers.c: bgp_daemon, bgp_daemon_msglog parsing fixed.

* SQL documentation fixes.

bd12418a446536794751ec6738ce99742509cf6f authored over 14 years ago by Paolo Lucente <[email protected]>

* fix, nfacctd: NetFlow v9 template print out for unknown field types

0e55c1cff53c1f39a41d52acca7495c2ee936898 authored over 14 years ago by Paolo Lucente <[email protected]>

* fix, pmacct.c: in_iface, out_iface aggregation primitives erroneusly kept

within a "#if defined (HAVE_L2)" code section when parsing '-c' option.

a81597f93b35bfd36ff10f46a8ac169b33743a3c authored over 14 years ago by Paolo Lucente <[email protected]>

* fix, nfacctd: when accounting for IPv6 traffic, wrong network mask fields

were grabbed. Field types 29 and 30 are correctly fetched now.

e3a72235fce2c6d7605b1495550a797443b06000 authored over 14 years ago by Paolo Lucente <[email protected]>

* nfacctd: added support for debugging of NetFlow v9 templates

4efaf958417f617e0ce150188984e103bca81b6b authored over 14 years ago by Paolo Lucente <[email protected]>

* fix, BGP daemon: support for IPv6 global address + link-local address

next-hops as part of MP_REACH_NLRI parsing
* Updated documentation

5ffc6fdbf24b59f455f1a60cac959cf6a8ab067b authored over 14 years ago by Paolo Lucente <[email protected]>

* BGP daemon: added support for RFC3107, ie. SAFI=4 label information, to

enable receipt of labeled IPv4/IPv6 unicast prefixes.
* Documentation updates

314db2d34609e799dd44c64179ea64f99b3f83a9 authored over 14 years ago by Paolo Lucente <[email protected]>

* bgp_daemon_md5_file: map made reloadable at runtime. Existing MD5 keys

are removed via setsockopt(), new ones are installed as per the newly
supplied map.
* bgp_dae...

fad2fa663a7c474549c7c5a3d1a4868acfddba85 authored over 14 years ago by Paolo Lucente <[email protected]>

* BGP daemon: TCP MD5 signature implemented. A new 'bgp_daemon_md5_file'

configuration directive is added for the purpose of defining BGP peers
and their respective M...

7ec3995a03ff2dff89548ea3f1f00bb6a51fb6aa authored over 14 years ago by Paolo Lucente <[email protected]>

* nfacctd: maximum NetFlow v9 type lifted to 256.

* nfprobe, sfprobe: send buffer size is now aligned to plugin_pipe_size if
any is specified pro...

b62fc0381ca0d3e475f3ccffbf81a09c0b99ea05 authored over 14 years ago by Paolo Lucente <[email protected]>

* New 'cos' aggregation primitive has been implemented providing support

for 802.1p priority bits. Collection is supported via sFlow, libpcap and
ULOG; export is supp...

f744317a5a1f6357b0d5f0b727e5b010f48c69ff authored over 14 years ago by Paolo Lucente <[email protected]>

* Refreshing building sub-system

4fe9882b922f6f686a36ce38cd9539a7923b8131 authored over 14 years ago by Paolo Lucente <[email protected]>

* Rolled version counters.

e7525636e6f6d5c71dc60fefbcdfedf76842d24a authored over 14 years ago by Paolo Lucente <[email protected]>

* MySQL, MY_create_dyn_table(): errno 1050 (ER_TABLE_EXISTS_ERROR) is being

considered valid condition.
* Documentation

1c16634b6b840424050a4633d492359359e4c3d5 authored over 14 years ago by Paolo Lucente <[email protected]>

* print_plugin: implemented CSV (comma-separated values) output format,

alongside existing tabular one. Introduced a print_output configuration
directive to select a...

7dda65fcd07b64628200b7972cbef8baaf121837 authored over 14 years ago by Paolo Lucente <[email protected]>

* tee_plugin, fix: internal data structure better 64-bit aligned.

112b825ff50d36ff13dbf396392824a358a94d98 authored over 14 years ago by Paolo Lucente <[email protected]>

* nfacctd: NetFlow v9, options parsing polish up.

03b2b3263367236323a7d474d0390a4174c2e058 authored over 14 years ago by Paolo Lucente <[email protected]>

* nfprobe, sfprobe: nfprobe_ipprec and sfprobe_ipprec features introduced

to mark self-originated NetFlow and sFlow datagrams with the supplied IP
precedence value.
* ...

c67a177e4e0125a3ca09f5d762de634ac5c182b1 authored over 14 years ago by Paolo Lucente <[email protected]>

* fix, sql_common.c: maximum SQL writers warning message was never reached

unless a recovery method is specifited. Thanks to Sergio Charpinel Jr for
reporting the issue...

708e2b7b622f75ba472a458b3db4c0e2876d1505 authored over 14 years ago by Paolo Lucente <[email protected]>

* tee_plugin: implementation wrapped-up. Documentation underway.

f3abe663ea8b4049d777a477510fc87414baf6f0 authored over 14 years ago by Paolo Lucente <[email protected]>

* tee_plugin: sFlow and NetFlow replication implementation is underway;

transparent IPv4/IPv6 replication feature added.

09dbd4173002add960f2f15a296e9a91298ec238 authored over 14 years ago by Paolo Lucente <[email protected]>

* tee_plugin: sFlow and NetFlow replication implementation is underway;

tee_receiver, tee_source_ip and tee_transparent features being developed.

3f90473ba9c7034e18a0d1605a8974ef91cce966 authored over 14 years ago by Paolo Lucente <[email protected]>

* Inauguration of tee_plugin()

25a347d49bb21f059f86023823654789016f5bf2 authored over 14 years ago by Paolo Lucente <[email protected]>

* fix, ip_frag.c: orphan fragment log messages re-classified as debug.

* fix, pkt_handlers.c: added explicit trailing '\0' symbol when truncating
AS-PATH and BGP comm...

13016ff6c7f28747db7d5512f25ee603d1131ee3 authored over 14 years ago by Paolo Lucente <[email protected]>

* Building sub-system and directory structure preparations for an upcoming

new tee plugin

876e4ff308b4b36809d7c98ff05d07c74c6cacc0 authored over 14 years ago by Paolo Lucente <[email protected]>

* Documentation updated

* pgsql_plugin.c, PG_create_dyn_table(): PGRES_TUPLES_OK is now considered
valid return code in...

837acec10812cd7663efab125b77611262d9e1c3 authored over 14 years ago by Paolo Lucente <[email protected]>

* Enhanced 802.1ad pmacctd support. While recursing, outer VLAN is always

reported as value of the 'vlan' primitive.
* Fix, pmacctd: 802.1p was kept integral part of the...

cbd476562961ec3627e4bbc76f0cff170d66b9bc authored over 14 years ago by Paolo Lucente <[email protected]>

* nfprobe, sfprobe: introduced support for export of the BGP next-hop

information. Source data selection for BGP next-hop is being linked to
[pmacctd_as|uacctd_as]...

ab8387a12a037833d9bac6fd8670fa49abf15361 authored over 14 years ago by Paolo Lucente <[email protected]>

* BGP daemon, bgp_daemon_ipprec: SOL_IP moved to IPPROTO_IP for better

portability. Added detection for failure setting IP_TOS socket option.

3c2c1a5f0c547a89106c6b37756d42e8fbadd406 authored over 14 years ago by Paolo Lucente <[email protected]>

* BGP daemon: new bgp_daemon_ipprec feature allows to mark self-originated

BGP messages with the supplied IP precedence value.

bc2d0d2046ff83a40e531e560288b2cf004af2e1 authored over 14 years ago by Paolo Lucente <[email protected]>

* peer_src_ip (IP address/agent ID of the device exporting NetFlow/sFlow

datagrams) and peer_dst_ip (BGP next-hop) can now be filled from NetFlow/
sFlow protocols dat...

ab34995878900599bcd1e06dad3d6ef0c2f25ea5 authored over 14 years ago by Paolo Lucente <[email protected]>

* Rolling version counters

bc0e1967df242788ee37012dca84914918aa72c8 authored over 14 years ago by Paolo Lucente <[email protected]>

* Documentation updated

* Building sub-system: relax compiler optimizations option added

9c863dadf3926b3cb6bf75c61d09d2aab964f496 authored over 14 years ago by Paolo Lucente <[email protected]>

* ChangeLog updated

* Documentation updated

9d9321555973c01496ede3adff4205071cc634ea authored over 14 years ago by Paolo Lucente <[email protected]>

* Building sub-system: PF_RING workaround addendum

a3bf20e9ddd383efebcd031eb4625c5c7b341355 authored over 14 years ago by Paolo Lucente <[email protected]>

* Building sub-system: PF_RING workaround for pcap_dispatch not found

9d7c6d18c4b23814077263c161557680fcd02a97 authored over 14 years ago by Paolo Lucente <[email protected]>

* sfprobe: if the MAC layer is not available, change header protocol to 11

(IPv4) or 12 (IPv6) from 1.

8015686009eb26f0518a71ec8c6eee886d3df8ce authored over 14 years ago by Paolo Lucente <[email protected]>

* fix, bgp.c: bgp_attr_munge_as4path() return code was not defined for some

cases. This was causing some BGP messages to be considered as malformed.

5614ef2aa88dc4e6ef356c3bfb312928c76fd0b5 authored over 14 years ago by Paolo Lucente <[email protected]>

* uacctd: introduced MAC layer support the for Netlink/ULOG socket

1bdd31327753eb13fbfb392eed560c44b8de4245 authored over 14 years ago by Paolo Lucente <[email protected]>

* Tunnel inspection generalized: internal structures will allow up to 8

tunnel stacks. Up to 4 tunnel layers per stack are already supported.
First matching stack at...

ad9ffe8240a976d11dc866c211d3a28564af95f3 authored over 14 years ago by Paolo Lucente <[email protected]>