pmacct icon indicating copy to clipboard operation
pmacct copied to clipboard

[RPKI] Pretag map filtering not working for ROA status

Open SanderDelden opened this issue 11 months ago • 0 comments

Description I'm attempting to only print information pertaining to RPKI invalid prefixes, to achieve this I'm making use of the pretag map to filter based on ROA status. Unfortunately this does not seem to work, no data is printed. To verify this isn't being caused by simply having no traffic to invalid prefixes I adjusted the filter to set_tag=1 dst_roa=v but the problem remains.

Example nfacctd configuration:

plugins: print[ROA]

# Global config

bgp_daemon: true
bgp_daemon_port: 179
nfacctd_as: bgp
bgp_peer_src_as_type: bgp
bgp_daemon_max_peers: 1
bgp_agent_map: /etc/pmacct/mappings/bgp.map
nfacctd_port: 5009
nfacctd_renormalize: true
nfacctd_time_new: true
rpki_rtr_cache: 127.0.0.1:3323
rpki_rtr_cache_version: 1

# Plugin information config

pre_tag_filter[ROA]: 1
pre_tag_map[ROA]: /etc/pmacct/mappings/roa_pretag.map
aggregate[ROA]: dst_as, dst_roa, peer_dst_as, dst_net, dst_mask
print_output_file[ROA]: /tmp/pmacct/1m_ROA.json
print_output[ROA]: json
print_history[ROA]: 1m
print_history_roundoff[ROA]: m
print_refresh_time[ROA]: 60
print_output_file_append[ROA]: true

Example pretag map:

set_tag=1 dst_roa=i

Version We are running 1.7.8, unfortunately I have not been able to test against bleeding-edge due to #768

Appreciation Please consider starring this project to boost our reach on github! ✅

If any additional information is required, please let me know.

SanderDelden avatar Mar 14 '24 11:03 SanderDelden