Hi Sven, On Wed, May 03, 2006 at 03:28:22PM +0200, Sven Anderson wrote:
> Is there a case, when using the -r flag, where you don't want locking? Or > do you mean, that -l could be useful in case of not using -r? The latter. You can think at it like a macro-transaction. Now, multiple queries (ie. "80;21;20;22;53;25;443;*") are served in a shot (ok !) but are like micro-transaction. There could happen the unlikely case that, say, web traffic is catched by the first query (80); then, further web traffic arrive; then, it is catched and cleared by the last query (*). > BTW.: does the following error message refer to that locking?: > May 3 15:06:02 sniff pmacctd[16441]: ERROR ( dport/memory ): We are > missing data. No. It means that you are using too short plugin_pipe_size, buffer_size. Give a quick look to CONFIG-KEYS document for their meaning and typical values. If you want to be even more quick, try inserting the following lines in your configuration (they should do the job): plugin_pipe_size: 10240000 plugin_buffer_size: 10240 > What should be noted in the docs at least is, that * refers to the sum of > all traffic without the -r, and the rest of traffic with the -r flag, as a > consequence of the stepwise resetting of the counters. Don't you think so? Fully agreed. Will include this in the documentation! Thank you. Cheers, Paolo _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
