pmacct is a small set of passive network monitoring tools to measure, account and aggregate IPv4 and IPv6 traffic; aggregation revolves around the key concept of primitives (VLAN id, source and destination MAC addresses, hosts, networks, AS numbers, ports, IP protocol and ToS/DSCP field are supported) which may be arbitrarily combined to build custom aggregation methods; support for historical data breakdown, triggers and packet tagging, filtering and sampling.

Aggregates can be stored into memory tables, SQL databases (MySQL or PostgreSQL) or simply printed to stdout. Data is collected from the network either using libpcap (and optionally promiscuous mode) or reading NetFlow v1/v5/v7/v8/v9 and sFlow v2/v4/v5 datagrams, both unicast and multicast.

IP accounting is the key in ISP/IXP network operations like billing, graphing network resources usage, live or historical traffic analysis, handling of network thresholds, provisioning and SLA monitoring. SNMP counters sometime are not this useful because of their coarse granularity.

Finer granularities become valuable if data are historical and match logical entities of interest such as Autonomous System Numbers, departmental or customer network chunks, specific traffic flows, etc. Further, actual large-scale networks are able to produce, in very short times, high amounts of data that become quickly difficult to be processed in a meaningful way

In this context, traffic aggregation and advanced filtering and sampling capabilities are requirements that cannot be missed anymore.

Either using memory or SQL tables as backend storage, pmacct can easily feed data to tools like MRTG, RRDtool, Cacti and Gnuplot among the others. A little scripting abilities are required to glue pmacct with external tools and a number of sample scripts and some tutorials are already available.

pmacct-fe is a frontend tool for presenting network statistics in tables and plots. pmacct-fe project works by reading aggregates stored into a PostgreSQL database by pmacct.

Features include user authentication and capabilities, support for multiple observation points and customizable report types.

pmacct is a small set of passive network monitoring tools to measure, account and aggregate IPv4 and IPv6 traffic; aggregation revolves around the key concept of primitives (VLAN id, source and destination MAC addresses, hosts, networks, AS numbers, ports, IP protocol and ToS/DSCP field are supported) which may be arbitrarily combined to build custom aggregation methods; support for historical data breakdown, triggers and packet tagging, filtering, sampling.

Aggregates can be stored into memory tables, SQL databases (MySQL or PostgreSQL) or simply pushed to stdout. Data is collected either using libpcap (and optionally promiscuous mode of the listening interface) or reading Netflow v1/v5/v7/v8/v9 packets coming from the network.

IP accounting is the key for a range of operations like billing, pricing models application, live or historical traffic analysis, network thresholds handling, provisioning and SLA monitoring. Taking SNMP counters from network equipments sometime is not this useful because of their coarse granularity.

Finer granularities become valuable if available data match logical entities of interest such as Autonomous Systems, either departmental or customer networks, specific traffic flows, etc. and can be encapsulated into arbitrary timeframes (also referred as

However, actual large-scale networks are able to produce, in very short times, high amounts of data that become quickly difficult to be processed in a meaningful way. In this context, traffic aggregation and filtering capabilities are requirements that cannot be missed.

Either using memory or SQL tables as backend storage, pmacct can also easily feed data to tools like MRTG, RRDtool and Gnuplot among the others. A little scripting abilities are required to glue pmacct with external tools and a few sample scripts are already included.

Whats New in This Release:

· Support for TCP flags has been introduced.
· Flags are ORed on a per-aggregate basis.
· A new nfacctd_sql_log directive enables the use of NetFlows First and Last Switched values as timeslot delimiters.
· sfprobe and nfprobe plugins are now able to propagate tags to remote collectors through sFlow v5 and NetFlow v9 protocols.
· pmacct memory client features a new -T command line switch to output either TopN statistics.
· The pre_tag_map_entries configuration directive now allows you to dynamically allocate the Pre-Tagging map.
· There are miscellaneous bugfixes.

pNRG project is a package for maintaining and visualizing network data, particularly suited for historical trend analysis of network resources.

pNRG doesnt need any explicit configuration and is able to auto-discover, mantain and graph new resources (either IPv4/IPv6 end hosts, network segments, MAC addresses, Autonomous Systems, etc.) as soon as they produce a traffic footprint.

pNRG at a glance:

* Easily displays network data collected through pmacct, regardless of the data source, ie. the network itself, NetFlow or sFlow.
* Straight to your preferred web browser from a couple of pmaccts memory plugins, without the need to configure or define anything.
* No need to rotate, mantain or update anything once the package is in place.
* Just a working installation of pmacct, RRDtool and an Apache supporting execution of CGIs are required.

While it has been over-simplified, specifically tailored to network usage and written from the scratch, most of its concepts are deeply rooted inside the NRG project. For the task, pNRG gets data from a couple of pmaccts memory plugins and relies over RRDTool for graphs and CGIs.

SIAR (Simple IP Account Reporter) is a plug-in for pmacct (Promiscuous Mode IP Accounting Package) for creating specific reports of traffic on a LAN.

SIAR plugin creates an overview of the total of traffic that passed through the interface, a top protocol table, a top listener table, a top talkers table, a total situation table, seek for an IP source, seek for an IP destination, seek for both, a top conversation table and a graph for a specific day

Installation:

After you have download the file, you have to decompress it in the web-server folder. I suggest to decompress it in /var/www/, infact if you decompress it in an another you will have problems with the code.

cd /var/www/
tar xfz < name >-x-y-z.tar.gz
cd < name >-x-y-z.tar.gz

The tool is now installed. Read the CONFIG file for the configuration.

The SME Server server and gateway is free software (also referred to as open-source software) and is freely available for anyone to download.

This software is brought to you by the community and contribs.org. Many individuals and organizations (both commercial and non-profit) use the SME Server as their primary network server and gateway.

We would like to remind you that the SME Server software is licensed under the General Public License (GPL). This means that if you alter the software and distribute the altered version, you must make the source code for your altered version freely available.

The GPL is a large part of why free software has made such an impact on the commercial scene. By restricting anyone from making proprietary modifications, the GPL ensures that improvements find their way back to the original code base, thereby creating an explosive rate of technical advance.

The difference between traditional development and GPL development is the difference between a light bulb - where output is radiated in many directions - and a laser - where output is reflected back in a coherent way to produce a greater, more focused result.

Its main design focus is simple, centralized configuration, along with security and ease of installation.

Whats New in This Release:

· This release is based on CentOS 4.5 and all packages have been updated to the latest releases. This release contains many new features, all released updates for SME Server 7.1 and fixes for many reported problems. Upgrades will be available by CD, the Software Installer and command line. All users should upgrade to this release.