ipacc: IP accounting package
ipacc is a data collection and reduction tool for IP traffic, permitting
data to be collected on traffic flows for purposes such as charging,
traffic analysis and capacity planning.
Data can be collected using Cisco's NetFlow, natively via the Berkeley
Packet Filter (BPF) or by reading Cisco IP accounting data. In
addition, data can be recorded raw and replayed through ipacc.
The package is intended for use on BSD and Linux based systems.
ipacc's features include:
- Real-time reduction of traffic data into billing records;
- Data collection using Cisco IP accounting;
- Data collection using Cisco NetFlow;
- Data collection using the BSD Berkeley Packet Filter;
- Data collection using the libpcap packet capture library;
- Real-time or near-real time tracking of dynamic IP assignments;
- Rating by
- IP addresses
- Traffic direction
- Protocol, as client or server
- Time of day
- Type of service
- Multiple data sources in a single configuration;
- Distributed collection, rating and merging;
- Collection of routing information from Cisco routers and local
routing tables;
- Flexible data export facility, including:
- Custom data record formats;
- Custom header and trailer records;
- Summarisation of traffic by protocol, rate, network, local or remote IP
address or type of service;
- Multiple custom counters per record;
- Sorting of data records by any reportable field;
- Centralised or distributed management of collector nodes;
- Logging of system messages to syslog, file and/or email.
This document refers to ipacc version
4.1.0.