[nfacctd] failed to parse Option Templates from Arista EOS device about pmacct

[paololucente]

Hi Thomas ( @ThomasJLLN ),

Yes, please. Send me some capture so that i can reproduce the issue and look into it. I see also a map /etc/pmacct/ipfix.map: probably having the config and the map (or an excerpt of it and any other ancillary files referenced by the config) would help.

Paolo

[ThomasJLLN]

Hello @paololucente,

Thank you for your response.
I've sent you an email with the capture file.
Please find below the configuration files:

nfacctd.conf

daemonize: false
plugin_exit_any: true
propagate_signals: true

nfacctd_port: 2077
nfacctd_ip: 0.0.0.0
nfacctd_interface: ens8f0
nfacctd_account_options: true
nfacctd_renormalize: true
nfacctd_pro_rating: true
#nfacctd_pre_processing_checks: false
#nfacctd_disable_opt_scope_check: true

pre_tag_map: /etc/pmacct/ipfix.map
#pre_tag_label_encode_as_map: true
maps_entries: 2048
maps_refresh: true
sampling_map: /etc/pmacct/sampling.map
aggregate_primitives: /etc/pmacct/primitives.lst

plugins: print[data], print[option_vrf]

pre_tag_filter[data]: 100
aggregate[data]: label, peer_src_ip, src_host, dst_host, proto, src_port, dst_port, in_iface, out_iface, vrf_id_ingress
print_history[data]: 300
print_refresh_time[data]: 300
print_output[data]: csv
print_output_file[data]: /var/log/nfacctd.log
print_output_file_append[data]: true

pre_tag_filter[option_vrf]: 200
aggregate[option_vrf]: peer_src_ip, vrf_id_ingress, vrf_name
print_output[option_vrf]: csv
print_output_file[option_vrf]: /var/log/nfacctd_option.log
print_output_file_append[option_vrf]: true
print_history[option_vrf]: 300
print_refresh_time[option_vrf]: 300

! Increase the data queue between the core process and the plugins
plugin_pipe_size: 10240000

! The value has to be <= the size defined by 'plugin_pipe_size' and keeping a ratio < 1:1000 between the two
! Once a buffer is filled, it is delivered to the plugin
plugin_buffer_size: 10240

timestamps_since_epoch: true
timestamps_secs: true

sampling.map

id=16384 ip=0.0.0.0/0

primitives.lst

name=vrf_id_ingress field_type=234 len=4 semantics=u_int
name=vrf_id_egress field_type=235 len=4 semantics=u_int
name=vrf_name field_type=236 len=32 semantics=str
name=int_descr field_type=83 len=64 semantics=str
name=sampler_interval field_type=50 len=4 semantics=u_int
name=sampler_id field_type=48 len=2 semantics=u_int