Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[RPKI] Pretag map filtering not working for ROA status #769

Open
SanderDelden opened this issue Mar 14, 2024 · 0 comments
Open

[RPKI] Pretag map filtering not working for ROA status #769

SanderDelden opened this issue Mar 14, 2024 · 0 comments

Comments

@SanderDelden
Copy link

Description
I'm attempting to only print information pertaining to RPKI invalid prefixes, to achieve this I'm making use of the pretag map to filter based on ROA status. Unfortunately this does not seem to work, no data is printed. To verify this isn't being caused by simply having no traffic to invalid prefixes I adjusted the filter to set_tag=1 dst_roa=v but the problem remains.

Example nfacctd configuration:

plugins: print[ROA]

# Global config

bgp_daemon: true
bgp_daemon_port: 179
nfacctd_as: bgp
bgp_peer_src_as_type: bgp
bgp_daemon_max_peers: 1
bgp_agent_map: /etc/pmacct/mappings/bgp.map
nfacctd_port: 5009
nfacctd_renormalize: true
nfacctd_time_new: true
rpki_rtr_cache: 127.0.0.1:3323
rpki_rtr_cache_version: 1

# Plugin information config

pre_tag_filter[ROA]: 1
pre_tag_map[ROA]: /etc/pmacct/mappings/roa_pretag.map
aggregate[ROA]: dst_as, dst_roa, peer_dst_as, dst_net, dst_mask
print_output_file[ROA]: /tmp/pmacct/1m_ROA.json
print_output[ROA]: json
print_history[ROA]: 1m
print_history_roundoff[ROA]: m
print_refresh_time[ROA]: 60
print_output_file_append[ROA]: true

Example pretag map:

set_tag=1 dst_roa=i

Version
We are running 1.7.8, unfortunately I have not been able to test against bleeding-edge due to #768

Appreciation
Please consider starring this project to boost our reach on github!

If any additional information is required, please let me know.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant