2. Pmacct
- pmacct is a small set of IPv4/IPv6 accounting and aggregation tools. Aggregation of IP traffic revolves around the concept of primitives (VLAN id, source and destination MAC addresses, IP addresses, networks, AS numbers, ports, ToS field, and IP protocol are supported) that may be employed alone or arbitrarily combined with others to form complex aggregation methods. It supports custom historical breakdown, packet sampling, filtering and tagging, recovery actions, and triggers. Libpcap (and promiscuous mode if required), NetFlow v1/v5/v7/v8/v9 and sFlow v2/v4/v5 are supported.
pmacct是一个用于搜集IP流量信息(源地址,字节计数,和包数量)的工具。数据保存在一个内存中的表内,客户端程序可以通过一个本地面向流的连接访问其内容。搜集离线包通过使用pcap库和混合模式下的一个或多个网卡实现。 |