Re: [Nfsen-discuss] [Nfdump-discuss] Request for comment: flow tagging

2012-08-21 Thread Peter Haag
Hi Bojan, Thanks for your feedback. On 20/8/12 8:47 PM, Bojan Zdrnja (SANS ISC) wrote: Hi Peter, snip Sounds pretty cool - I think that option number 2) would be better as well since it's more flexible and allows for better expansions in the future, especially if we're building stuff on

Re: [Nfsen-discuss] [Nfdump-discuss] Request for comment: flow tagging

2012-08-21 Thread Peter Haag
Hi Thomas, Thanks for your feedback. On 21/8/12 1:30 PM, Tomas Podermanski wrote: Hi Peter, snip Definitely the second one - today, flexibility more important than storage and performance. Well - storage means I/O and performance is still a main goal of nfdump. Therefore I still try to

Re: [Nfsen-discuss] [Nfdump-discuss] Request for comment: flow tagging

2012-08-21 Thread Peter Haag
On 21/8/12 9:20 PM, Bojan Zdrnja (SANS ISC) wrote: Hi Peter, On Tue, Aug 21, 2012 at 8:55 PM, Peter Haag ph...@users.sourceforge.net wrote: Hi Bojan, Thanks for your feedback. You're welcome :) - add statistics calculation per time as well (for example, per second). It would be nice