pmacct 1.5.1

Passive network monitoring tools to measure, account, aggregate, classify, and export IPv4 and IPv6 traffic

  Add it to your Download Basket!

 Add it to your Watch List!


Rate it!

What's new in pmacct 1.5.1:

  • BMP daemon: BMP, BGP Monitoring Protocol, can be used to monitor BGP sessions. The current implementation is base on the draft-ietf-grow-bmp-07 IETF draft. The daemon currently supports BMP events and stats only, ie. initiation, termination, peer up, peer down and stats reports messages. Route Monitoring is future (upcoming) work but routes can be currently sourced via the BGP daemon thread (best path only or ADD-PATH), making the two daemons complementary. The daemon enables to write BMP messages to files or AMQP queues, real-time (msglog) or at regular time intervals (dump) and is a separate thread in the NetFlow (nfacctd) or sFlow (sfacctd) collectors.
  • tmp_net_own_field directive is introduced to record both individual source and destination IP addresses and their IP prefix (nets) as part of the same aggregation method. While this should become default behaviour, a knob for backward-compatibility is made available for all 1.5 until the next major release.
  • Introduced nfacctd_stitching and equivalents (ie. sfacctd_stitching): when set to true, given an aggregation method, two new non-key fields are added to the aggregate upon purging data to the backend: timestamp_min is the timestamp of the first element contributing to a certain aggregate and timestamp_max is the timestamp of the last element. In case the export protocol provides time references, ie. NetFlow/IPFIX, these are used; if not the current time (hence time of arrival to the collector) is used instead.
  • Introduced amqp_routing_key_rr feature to perform round-robin load- balancing over a set of routing keys. This is in addition to existing, and more involved, functionality of tag-based load-balancing.
Read full changelog
send us
an update
875 KB
Paolo Lucente
Home \ Internet Utilities
1 pmacct Screenshot:
pmacct - This is pmacct's help message displayed in a Terminal window when running it on OS X with no parameters.
IP accounting is key activity underlying popular ISP/IXP network operations like billing, graphing network resources usage, live or historical traffic trends analysis, management of network thresholds and SLA monitoring.

Often SNMP counters do not help because of their coarse granularity; traffic mirroring, NetFlow and sFlow break this barrier by offering data at a finer granularity, ie. intercepting logical entities of greater interest such as Autonomous Systems, departmental or customer networks or just specific traffic flows.

But actual high-speed large-scale networks are able to produce, in very short times, high amounts of data that become quickly difficult to be processed. In this context, traffic aggregation and advanced filtering and sampling capabilities become key requirements.

pmacct is an open source and small set of passive network monitoring tools to measure, account, classify, export and aggregate IPv4 and IPv6 traffic.

Either using memory or SQL tables as backend storage, pmacct can easily feed data into external tools including RRDtool, GNUPlot, Net-SNMP, MRTG and Cacti among the others.

Little scripting abilities are required and a number of sample scripts, contributions, web frontends and some tutorials are already available.

Last updated on February 23rd, 2015

Runs on: Mac OS X (Universal Binary)

feature list

#network monitor #traffic monitor #traffic analysis #monitor #traffic #network #analyze

Add your review!