Passive network monitoring tools to measure, account, aggregate, classify, and export IPv4 and IPv6 traffic #Network monitor #Traffic monitor #Traffic analysis #Monitor #Traffic #Network
IP accounting is key activity underlying popular ISP/IXP network operations like billing, graphing network resources usage, live or historical traffic trends analysis, management of network thresholds and SLA monitoring.
Often SNMP counters do not help because of their coarse granularity; traffic mirroring, NetFlow and sFlow break this barrier by offering data at a finer granularity, ie. intercepting logical entities of greater interest such as Autonomous Systems, departmental or customer networks or just specific traffic flows.
But actual high-speed large-scale networks are able to produce, in very short times, high amounts of data that become quickly difficult to be processed. In this context, traffic aggregation and advanced filtering and sampling capabilities become key requirements.
pmacct is an open source and small set of passive network monitoring tools to measure, account, classify, export and aggregate IPv4 and IPv6 traffic.
Either using memory or SQL tables as backend storage, pmacct can easily feed data into external tools including RRDtool, GNUPlot, Net-SNMP, MRTG and Cacti among the others.
Little scripting abilities are required and a number of sample scripts, contributions, web frontends and some tutorials are already available.
What's new in pmacct 1.5.2:
- Introduced support for a RabbitMQ broker to be used for queueing and data exchange between Core Process and plugins. This is in alternative to the home-grown circular queue implementation. plugin_pipe_amqp directive, along with all other plugin_pipe_amqp_* directives, can be set globally or apply on a per plugin basis (ie. it is a valid scenario, if multiple plugins are instantiated, that some make use of home-grown queueing, while others use RabbitMQ based queueing).
- Introducting support for Maximind GeoIP v2 (libmaxminddb) library: if pmacct is compiled with --enable-geoipv2, this defines full pathname to a Maxmind GeoIP database v2 (libmaxminddb) Only the binary database format is supported (ie. it is not possible to load distinct CSVs for IPv4 and IPv6 addresses).
- Introduced infrastructure for sFlow counters and support specifically for generic, ethernet and vlan counters. Counters are exported in JSON format to files, specified via sfacctd_counter_file. The supplied filename can contain as variable the sFlow agent IP address.
- Introduced a new thread_stack config directive to allow to modify the thread stack size. Natanael Copa reported that some libc implementations, ie. musl libc, may set a stack size that is too small by default.
pmacct 1.5.2
add to watchlist add to download basket send us an update REPORT- runs on:
- Mac OS X (PPC & Intel)
- file size:
- 898 KB
- filename:
- pmacct-1.5.2.tar.gz
- main category:
- Internet Utilities
- developer:
- visit homepage
ShareX
Zoom Client
4k Video Downloader
Context Menu Manager
IrfanView
Windows Sandbox Launcher
7-Zip
Bitdefender Antivirus Free
calibre
Microsoft Teams
- Bitdefender Antivirus Free
- calibre
- Microsoft Teams
- ShareX
- Zoom Client
- 4k Video Downloader
- Context Menu Manager
- IrfanView
- Windows Sandbox Launcher
- 7-Zip