On 2012-09-05 5:02 AM, Marko Mrvelj wrote: > Thanks for. I think so far I can live with daily, I used hour, since it > seemd better for testing / prototyping. But would it be hard to support it? > Not really. Adding some SQL queries and code here and there.
> I checked with daily and it works. What I don't understand how often are > violations checked. I created 10MB violation, but I managed to download 680 > MB before it was triggered. It runs with pfmon, so it will evaluate the stuff every 10min. It will also depends on the Interim Updates. If you don't send interim updates, the data is updated only on acct-stop packets. > > Note: Catalyst seems to support one minute accounting updates at most. Is > this case with most of the devices? Most supports Interim, but many still doesn't. -- Francois Gaudreault, ing. jr [email protected] :: +1.514.447.4918 (x130) :: www.inverse.ca Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
