Hi all,
I have two redundant nfcapd collectors placed in different locations
collecting NetFlow from the same source. In case of failure of one link
I want to synchronize the data on these two collectors. I can not do it
on the file basis because according to my experiments, the flows
exported at the end of five-minute interval can be stored into different
nfcapd files on both collectors (example: on the first collector it can
be stored to nfcapd.201102230800 and on the second one it can be
nfcapd.201102230805). Is there any way, how to perform synchronization
of both databases? I can do a script for this which will perform nfcapd
files comparation and add missing flows. But I don't know, how the flows
can be added to existing nfcapd file. I can reverse engineer nfcapd
application to find the solution but first I try to ask, if someone have
not already created such application.
Or is there any better solution for this?
Can someone help, please?
Thank you,
Jan
------------------------------------------------------------------------------
Free Software Download: Index, Search & Analyze Logs and other IT data in
Real-Time with Splunk. Collect, index and harness all the fast moving IT data
generated by your applications, servers and devices whether physical, virtual
or in the cloud. Deliver compliance at lower cost and gain new business
insights. http://p.sf.net/sfu/splunk-dev2dev
_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
