NAME:
  pmacct (Promiscuous mode IP Accounting package) v0.7.2
  pmacct is Copyright (C) 2004 by Paolo Lucente


DESCRIPTION:
  pmacct is a set of network tools to gather IP traffic informations (bytes
  counter and number of packets); aggregation of statistics is done using
  simple primitives (MAC addresses, VLAN IDs, source host, destination host,
  ports and IP protocols) that can be used alone or combined together to form
  complex aggregation methods; counters are either global or historical
  (aggregated and separated at fixed timeslots); Agent IDs allow to create
  distributed counters. Data is either stored in a memory table, pulled to
  stdout or in a SQL database (MySQL or PostgreSQL). Gathering packets off
  the wire is done either using pcap library (and promiscuous mode of the
  listening interface) or reading Netflow packets coming from the network.

  Many network equipments support redirection of network traffic to a
  replication port; here, non-blocking architectures help in not negatively
  affect global performances and usual routing or forwarding operations when
  mirroring data. Moreover, the export of traffic data by the mean of protocols
  like Cisco's Netflow is also widely supported. Both methods, traffic mirroring
  and export of traffic data, leave new chances to do ip accounting online (but
  not inline), off critical paths. So, new opportunities arise for advanced, time
  consuming data manipulation or post processing activities, well behind classical
  increasing counters and graphs creation.

  Please refer to the TODO file to read about some immediate future projects  
  about development of this tool.


REQUIREMENTS:
  libpcap >= 0.6.x  -- http://www.tcpdump.org/


PLATFORMS:
  It has been tested and worked fine for:

  Red Hat Linux 7.x/8.x/9.x (*)
  Slackware Linux 8.x/9.x
  SuSE Linux 9.0
  OpenBSD 3.2/3.3 i386
  FreeBSD 4.x/5.x i386
  Tru64 5.x

  (*) In RH 7.x pcap.h header in /usr/include/pcap/ calls a bpf.h
  header supposed to be in /usr/include/net/bpf.h; doing some checks,
  i found the header in /usr/include/pcap/net/bpf.h; this bug makes 
  to fail pcap header consistency checks in configure script. Please
  verify and eventually take care to make a symlink from /usr/include/pcap/net/bpf.h
  to /usr/include/net/bpf.h 

  Did you successfully completed compilation and installation of the
  software on some other operating system or architecture not listed
  here ? Please, let me know. 


NETFLOW:
  Supported versions: V1/V5

  Netflow packets have been read successfully from:
  Cisco 2500, Cisco 7500; IOS 12.1
  Juniper M10; JunOS 6.2

  Did you successfully read Netflow packets from other network equipments
  not listed here ? Please, let me know.


INSTALLATION:
  see INSTALL and EXAMPLES files


LICENSE:
  GNU GENERAL PUBLIC LICENSE
  see COPYING for details.


CONTACTS:
  see AUTHORS file.  


Cheers,
Paolo
