Welcome to the pmacct project!
Overview | Downloads | Mailing lists | Documentation | Contacts
OVERVIEW.
IP accounting is key activity underlying essential network management tasks like billing,
graphing network resources usage, live or historical traffic trends analysis, steering BGP
peerings, real-time alerting and certain SLA monitoring. Often SNMP counters do not help
in these areas because of their coarse granularity; live traffic mirroring, NetFlow and
sFlow break this barrier by offering data at a finer granularity. But current high-speed
large-scale networks are able to produce, in very short times, high amounts of data that
become quickly difficult to be processed. In this context, both spatial and temporal
aggregation, flexible filtering and sampling capabilities become key requirements.
pmacct is a small set of passive network monitoring tools to measure, account, classify, aggregate and export IPv4 and IPv6 traffic; its main features are:
- Suitable to ISP, IXP, CDN, IP carrier, data-centre and hot-spots enviroments
- Runs on Linux, BSDs, Solaris and embedded systems
- Support for both IPv4 and IPv6
- Collects data through libpcap, Netlink/ULOG, NetFlow v1/v5/v7/v8/v9, sFlow v2/v4/v5 and IPFIX
- Supports Cisco NEL for CGNAT scenarios (from 0.14.3)
- Saves data to a number of backends including memory tables, MySQL, PostgreSQL, SQLite, BerkeleyDB, MongoDB and flat files
- Exports data to remote collectors through IPFIX, NetFlow v5/v9 and sFlow v5
- Replicates incoming IPFIX, NetFlow and sFlow packets to remote collectors
- Flexible architecture to tag, filter, redirect, aggregate and split captured data
- Embeds a BGP daemon for efficient visibility into the inter-domain routing plane. Read more here.
- Embeds an IS-IS/IGP daemon for visibility of internal routes
- Supports BGP/MPLS VPNs rfc4364
- Traffic streams classification. Read more here
- Support for packet and flow sampling and renormalization
- Inspection of tunnelled traffic (ie. GTP)
- GeoIP lookups leveraging Maxmind library (from 0.14.2)
- Pluggable architecture for easy integration of new capturing environments and data backends
- Careful SQL support: data pre-processing, triggers, dynamic table naming
- It's free, open-source, developed and supported with passion and open mind
Whether using memory or SQL tables as backend storage, pmacct can easily feed data into external tools including RRDtool, GNUPlot, Net-SNMP, MRTG and Cacti among the others. Little scripting abilities are required and a number of sample scripts, contributions, web frontends and some tutorials are already available.
DOWNLOADS.
pmacct.
http://www.pmacct.net/pmacct-0.14.3.tar.gz |
ChangeLog |
FAQS |
CONFIG-KEYS |
Latest
Size: 746387 bytes | Date: 03-May-2013
http://www.pmacct.net/pmacct-0.14.2.tar.gz
Size: 721749 bytes | Date: 14-Jan-2013
http://www.pmacct.net/pmacct-0.14.1.tar.gz
Size: 704707 bytes | Date: 03-Aug-2012
Freshest code snapshot is now available through CVS
* Set CVSROOT=:pserver:anonymous@cvs.pmacct.net:2402/home/repo-0.14
* cvs login (password is 'pmacct')
* cvs co pmacct
Last CVS commit on: 25-May-2013
pmacct-contribs.
Now maintained and available for check-out at GitHub
ONLINE DOCUMENTATION.
For official and user-contributed documentation, check out our newly introduced Open Documentation effort at wiki.pmacct.net
RELEVANT DOCUMENTS AND PRESENTATIONS.
Presentation: pmacct: a free open-source traffic accounting tool (2012 update), Paolo Lucente, Nov 2012 @ ESNOG10 (pdf)
Presentation: BGP policy violations in the data-plane, Pierre Francois (IMDEA), Paolo Lucente, Oct 2011 @ RIPE63 (pdf)
Presentation: Best practices in network planning and traffic engineering, Thomas Telkamp (Cariden), Clarence Filsfils (Cisco), Paolo Lucente, Nov 2010 @ RIPE61, Jun 2011 @ NANOG52 (pdf)
Presentation: Building traffic matrices to support peering decisions, Paolo Lucente, Jun 2010 @ NANOG49 (pdf), Sep 2010 @ European Peering Forum 5 (pdf)
Presentation: pmacct: introducing BGP natively into a NetFlow/sFlow collector, Paolo Lucente, Sep 2009 @ UKNOF14, SwiNOG19 (pdf)
Presentation: IP accounting reloaded: the pmacct project, Paolo Lucente, Jan 2007 @ UKNOF6, May 2007 @ INEX Members meeting (pdf)
Presentation: pmacct, a new player in the network management arena, Paolo Lucente, Apr 2006 @ RIPE52 (pdf)
Presentation: Utilizzo di strumenti di network accounting a supporto della gestione di infrastrutture complesse (IT), Paolo Lucente, Massimo Ianigro (CNR-ISSIA), May 2005 @ GARR Conference 2005 (pdf)
Paper: pmacct: steps forward interface counters, Paolo Lucente, Mar 2005 (pdf)
Guide: Make graphs: pmacct 0.8.x and Cacti, Pedro Sanchez, Feb 2005 (html)
LINKS.
Some tools related to or topped over pmacct. In alphabetical order. Do you know of any tools relying on pmacct
not listed here ? Please, let me know.
BWstat: a network traffic statistical tool written in PHP.
Captrap: a set of Perl scripts designed to work with the pmacct and a
MySQL database to generate tables and graphs.
FloX (Flow eXplorer): a simple PHP tool to examine large tables of
flow data in a SQL database.
netactuator: an active network management tool, for graphing individual
host activities and make individual host behavior patterns.
pmacct-fe: a frontend tool to present network statistics.
pmacct-frontend: a PHP frontend to pmacct (screenshot).
pmacct-snmp: a package to export network data through SNMP.
pmGraph: an application for network monitoring
to help network administrators to better monitor and manage their networks.
pNRG: the pmacct's Network Resource Grapher.
PACKAGES.
A few pointers to packaged versions of pmacct. Mantainers are listed in the AUTHORS doc: feedbacks need to be
addressed directly to them. Do you know of any packaged version not listed here ? Please, let me know.
OpenSUSE RPMs packaged by Peter Nixon are available here
Fedora RPMs packaged by Douglas E. Warner are available here
ALTLinux RPMs packaged by Slava Dubrovskiy are available here
Solaris packages prepared by Steven M. Christensen are available here
REQUIREMENTS.
libpcap >= 0.6.x --
http://www.tcpdump.org/
PLATFORMS.
It has been tested and reported to work on:
All major Linux distributions
Solaris 8/9/10 x86/sparc
FreeBSD 4.x/5.x/6.x x86/sparc
OpenBSD 3.7/3.8/3.9 x86/sparc
NetBSD 2.0 x86
LEAF Bering-uClibc
Did you successfully completed compilation and installation of the
software on other operating system or architecture not listed here ?
Please, let me know.
NETFLOW.
Supported versions: V1/V5/V7/V8/V9
Netflow datagrams have been read successfully from:
Cisco routers and switches: ISR, ASR, CRS, Catalyst, Nexus; IOS >= 11.2
Juniper M/MX/T series; JunOS >= 6.x
Did you successfully read Netflow datagrams from other network gears ?
Please, let me know.
SFLOW.
Supported versions: V2/V4/V5
sFlow datagrams have been read successfully from:
HP Procurve 2800, 3400, 4200 and 9300 series
Brocade BigIron 8000 series, TurboIron series and ICX
Brocade FastIron Edge, Edge X and Workgroup Edge series
Brocade NetIron XMR/MLX series
Force10 E series (E300, E600, E1200)
Extreme Black Diamond 8800 series
Juniper EX 4200 series
Arista 7100T series
Did you successfully read sFlow datagrams from other network gears ?
Please, let me know.
PROMISCUOUS MODE.
Other than traditional Ethernet NICs, datagrams have been read successfully from:
Endace DAG Ethernet cards; libdag 3.0
MAILING LISTS.
If you are interested in news (new releases and Changelogs, etc.) either about the project
itself or related ones, subscribe to the pmacct-news mailing list. The list can be open for
posting - on request, see CONTACTS - to developers involved in projects based on pmacct.

Description:
News from the project: new releases, general annoucements, what is about to happen, etc.
Subcribe instructions:
send a blank email to: 
Traffic flow: very low
However, if you don't like to get in touch with our smiley mailing-list robot, you can still
track new pmacct releases subscribing to the project on Freshmeat.Net. For further informations,
take a look to the Freshmeat page

Description:
Discussion about project development. A place where talk about what the project still misses,
new ideas, novel approaches, etc. It's also the place where to get in touch with other pmacct
users.
Subcribe instructions:
send a blank email to: 
Traffic flow: moderate
Archive:
http://www.mail-archive.com/pmacct-discussion@pmacct.net/

Description:
CVS commits from pmacct developers.
Subcribe instructions:
send a blank email to: 
Traffic flow: moderate
Archive:
http://www.mail-archive.com/pmacct-commits@pmacct.net/
LICENSE.
Licensed under The GNU General Public License, Version 2. see COPYING for details.
CONTACTS.
Any comments are warmly welcome. Feel free to contact me for bugs, critics, requests, suggestions
or even for a simple feedback with your opinions about the work done at: