i am using netflow and nfacctd and sql_dont_try_update is set to true
(because update query take too much cpu usage) so in this case i do not
lost any flows ?
On Sat, Apr 22, 2017 at 7:52 PM, Paolo Lucente <pa...@pmacct.net> wrote:
> Hi Farshid,
> The question is generic. What daemon are you using? Since you mentioned
> flows, the following holds if you are using NetFlow/IPFIX and hence
> nfacctd as daemon. Also the assumption is sql_dont_try_update is not set
> to true (defaults to false).
> Granted nothing gets lost. What you will be logged after the 900 seconds
> depends on your configured aggregation method ('aggregate' directive): if
> it is something like 'peer_src_ip, src_host, dst_host, proto, src_port,
> dst_port, tos, timestamp_start, timestamp_end' then you will get reported
> all flows during those 900 seconds (if yoo many flows, you will need to
> tweak the print_cache_entries directive). If, instead, your aggregation
> method is "shorter", ie. 'peer_src_ip, src_host, dst_host', then bytes
> and packet counters for conversation between source/destination hosts,
> yes, will be updated.
> On Tue, Apr 18, 2017 at 03:14:25PM +0430, Farshid Abediny wrote:
> > Hello,
> > we set sql_refresh_time to 900 seconds due to high network list filter
> > write flows to mysql every 900 seconds so i want know when my routers
> > flows to pmacct it will save flow to its memory and every 900 seconds it
> > will update database right ?
> > so i do not lost flows between this interval, right?
> > thanks,
> > _______________________________________________
> > pmacct-discussion mailing list
> > http://www.pmacct.net/#mailinglists
> pmacct-discussion mailing list
pmacct-discussion mailing list