Welcome to the pmacct project!



  Overview | Downloads | Mailing lists | Documentation |
  Contacts


OVERVIEW.
IP accounting is key activity underlying essential network management tasks like billing, graphing network resources usage, live or historical traffic trends analysis, steering BGP peerings, real-time alerting and certain SLA monitoring. Often SNMP counters do not help in these areas because of their coarse granularity; live traffic mirroring, NetFlow and sFlow break this barrier by offering data at a finer granularity. But current high-speed large-scale networks are able to produce, in very short times, high amounts of data that become quickly difficult to be processed. In this context, both spatial and temporal aggregation, flexible filtering and sampling capabilities become key requirements.

pmacct is a small set of passive network monitoring tools to measure, account, classify, aggregate and export IPv4 and IPv6 traffic; its main features are:

Whether using memory or SQL tables as backend storage, pmacct can easily feed data into external tools including RRDtool, GNUPlot, Net-SNMP, MRTG and Cacti among the others. Little scripting abilities are required and a number of sample scripts, contributions, web frontends and some tutorials are already available.


DOWNLOADS.

pmacct.
http://www.pmacct.net/pmacct-1.5.0rc3.tar.gz | ChangeLog | FAQS | CONFIG-KEYS | Latest
Size: 815267 bytes | Date: 18-Apr-2014

http://www.pmacct.net/pmacct-1.5.0rc2.tar.gz
Size: 807952 bytes | Date: 25-Dec-2013

http://www.pmacct.net/pmacct-0.14.3.tar.gz
Size: 746387 bytes | Date: 03-May-2013

Freshest code snapshot is now available through CVS
* Set CVSROOT=:pserver:anonymous@cvs.pmacct.net:2402/home/repo-0.14
* cvs login (password is 'pmacct')
* cvs co pmacct
Last CVS commit on: 26-Aug-2014
Daily build from CVS: pmacct-daily.tar.gz

pmacct-contribs.
Now maintained and available for check-out at GitHub


ONLINE DOCUMENTATION.
For official and user-contributed documentation, check out our Open Documentation effort at wiki.pmacct.net


RELEVANT DOCUMENTS AND PRESENTATIONS.
Presentation: NetFlow & BGP multi-path: quo vadis?, Paolo Lucente, Elisa Jasinska (Netflix) Jun 2014 @ NANOG61 (pdf)
Tutorial: Collecting NetFlow with pmacct, Paolo Lucente, Apr 2014 @ RIPE SEE3 (pdf)
Presentation: pmacct: a free open-source traffic accounting tool (2012 update), Paolo Lucente, Nov 2012 @ ESNOG10 (pdf)
Presentation: BGP policy violations in the data-plane, Pierre Francois (IMDEA), Paolo Lucente, Oct 2011 @ RIPE63 (pdf)
Presentation: Best practices in network planning and traffic engineering, Thomas Telkamp (Cariden), Clarence Filsfils (Cisco), Paolo Lucente, Nov 2010 @ RIPE61, Jun 2011 @ NANOG52 (pdf)
Presentation: Building traffic matrices to support peering decisions, Paolo Lucente, Jun 2010 @ NANOG49 (pdf), Sep 2010 @ European Peering Forum 5 (pdf)
Presentation: pmacct: introducing BGP natively into a NetFlow/sFlow collector, Paolo Lucente, Sep 2009 @ UKNOF14, SwiNOG19 (pdf)
Presentation: IP accounting reloaded: the pmacct project, Paolo Lucente, Jan 2007 @ UKNOF6, May 2007 @ INEX Members meeting (pdf)
Presentation: pmacct, a new player in the network management arena, Paolo Lucente, Apr 2006 @ RIPE52 (pdf)
Presentation: Utilizzo di strumenti di network accounting a supporto della gestione di infrastrutture complesse (IT), Paolo Lucente, Massimo Ianigro (CNR-ISSIA), May 2005 @ GARR Conference 2005 (pdf)
Paper: pmacct: steps forward interface counters, Paolo Lucente, Mar 2005 (pdf)
Guide: Make graphs: pmacct 0.8.x and Cacti, Pedro Sanchez, Feb 2005 (html)


LINKS.
Some tools related to or topped over pmacct. In alphabetical order. Do you know of any tools relying on pmacct not listed here ? Please, let me know.

BWstat: a network traffic statistical tool written in PHP.
Cacti-pmacct: a Cacti module to display and search pmacct data.
Captrap: a set of Perl scripts designed to work with the pmacct and a MySQL database to generate tables and graphs.
FloX (Flow eXplorer): a simple PHP tool to examine large tables of flow data in a SQL database.
netactuator: an active network management tool, for graphing individual host activities and make individual host behavior patterns.
opennms-pmacct: a opennms module to display and search pmacct data.
pmacct-fe: a frontend tool to present network statistics.
pmacct-frontend: a PHP frontend to pmacct (screenshot).
pmacct-snmp: a package to export network data through SNMP.
pmGraph: an application for network monitoring to help network administrators to better monitor and manage their networks.
pNRG: the pmacct's Network Resource Grapher.


PACKAGES.
A few pointers to packaged versions of pmacct. Mantainers are listed in the AUTHORS doc: feedbacks need to be addressed directly to them. Do you know of any packaged version not listed here ? Please, let me know.

OpenSUSE RPMs packaged by Peter Nixon are available here
ALTLinux RPMs packaged by Slava Dubrovskiy are available here
Solaris packages prepared by Steven M. Christensen are available here


REQUIREMENTS.
libpcap >= 0.6.x -- http://www.tcpdump.org/


PLATFORMS.
It has been tested and reported to work on:
All major Linux distributions
Solaris 8/9/10 x86/sparc
FreeBSD 4.x/5.x/6.x x86/sparc
OpenBSD 3.7/3.8/3.9 x86/sparc
NetBSD 2.0 x86
LEAF Bering-uClibc

Did you successfully completed compilation and installation of the software on other operating system or architecture not listed here ? Please, let me know.


NETFLOW and IPFIX.
Supported versions: V1/V5/V7/V8/V9/V10

Netflow and IPFIX datagrams have been read successfully from:
Cisco routers and switches: ISR, ASR, CRS, Catalyst, Nexus; IOS >= 11.2
Juniper M/MX/T series; JunOS >= 6.x

Did you successfully read Netflow datagrams from other network gears ? Please, let me know.


SFLOW.
Supported versions: V2/V4/V5

sFlow datagrams have been read successfully from:
HP Procurve 2800, 3400, 4200 and 9300 series
Brocade BigIron 8000 series, TurboIron series and ICX
Brocade FastIron Edge, Edge X and Workgroup Edge series
Brocade NetIron XMR/MLX series
Force10 E series (E300, E600, E1200)
Extreme Black Diamond 8800 series
Juniper EX 4200 series
Arista 7100T series

Did you successfully read sFlow datagrams from other network gears ? Please, let me know.


PROMISCUOUS MODE.
Other than traditional Ethernet NICs, datagrams have been read successfully from:
Endace DAG Ethernet cards; libdag 3.0


MAILING LISTS.
If you are interested in news (new releases and Changelogs, etc.) either about the project itself or related ones, subscribe to the pmacct-news mailing list. The list can be open for posting - on request, see CONTACTS - to developers involved in projects based on pmacct.


Description: News from the project: new releases, general annoucements, what is about to happen, etc.

Subcribe instructions: send a blank email to:
Traffic flow: very low

However, if you don't like to get in touch with our smiley mailing-list robot, you can still track new pmacct releases subscribing to the project on Freshmeat.Net. For further informations, take a look to the Freshmeat page


Description: Discussion about project development. A place where talk about what the project still misses, new ideas, novel approaches, etc. It's also the place where to get in touch with other pmacct users.

Subcribe instructions: send a blank email to:
Traffic flow: moderate
Archive: http://www.mail-archive.com/pmacct-discussion@pmacct.net/


Description: CVS commits from pmacct developers.

Subcribe instructions: send a blank email to:
Traffic flow: moderate
Archive: http://www.mail-archive.com/pmacct-commits@pmacct.net/

LICENSE.
Licensed under The GNU General Public License, Version 2. see COPYING for details.


CONTACTS.
Any comments are warmly welcome. Feel free to contact me for bugs, critics, requests, suggestions or even for a simple feedback with your opinions about the work done at: