pmacct is a network tool to gather ip traffic informations
(bytes counter and number of packets); aggregation of
statistics is done using simple primitives (MAC addresses,
source host, destination host, ports and ip protocols) that can
be used alone or combined together to form complex aggregation
methods; counters are either global or historical (aggregated
and separated at fixed timeslots). Data is stored in a
in-memory table or using a SQL database (MySQL or PostgreSQL).
Gathering packets off the wire is done using pcap library and
promiscuous mode of network interfaces when specifically
required.
WWW: http://www.ba.cnr.it/~paolo/pmacct/
Say hello to the new "net-mgmt" category. There are probably more
ports that belong here than the ones I have identified and moved in
this, first, pass.
Approved in principle by: marcus
Update to 0.5.0
New features:
* support for 802.1Q (VLANs) tagged packets
* support for FDDI links. [EXPERIMENTAL]
* two new primitives have been added: source MAC address
and destination MAC address
* static aggregation directives (src_host, dst_host, ..)
are now superseded by primitives that can be stacked
together to form complex aggregation methods.
The commandline syntax of the client program has been
consequently changed to support these new features
Approved by: fjoe (mentor) (implicit)
