Here's a few tips from my installation, and your mileage may vary. Try to limit the size of your database to keep it in memory. Depending on your budget and needs, this might mean building a cheap server from commodity parts with a few GB of inexpensive RAM, instead of using the high-end HP or IBM server with lots of cores and just a little RAM. This also might mean purging old data, or archiving to a separate DB of necessary.
Use the lowest version of the schema that you can get away with. I'm using v1 for my current task, since it has fewer fields than the newer schemas. On top of that, delete the unnecessary fields from the DB tables. Each field uses a minimal amount of storage in each row, even if the field has no data in it. INSERTs are much, much faster than UPDATEs. I can do a few thousand inserts in a matter of seconds, and afterwards a few hundred UPDATES can go on for 15-20 minutes. This is discussed in the docs a bit, and how you manage this depends on how you are storing data. And while the updates are happening, the database is locked for other activities (such as INSERTs for the next time slot...). I'm receiving netflows from a Packetshaper, and for connectionless (not TCP) flows it delays reporting on the flow for up to an hour. I'm using MySQL on Redhat Fedora, but I'm sure this goes for other DBs and OSes as well. Hope this helps, Matt At 1:45 AM +0200 10/12/06, idrissi Yaghir wrote: >Hello, > >i´m using nfacctd with the MySQL-Plugin in my >Project. I´ve wrote an analyser with php, that >use this Database to list the Flow-Data and to >generate Diagramms. I use the fprobe on >Linux-routers, and I have successfully received >the Flows with nfacctd and stored in a >MySQL-database. This worked perfectly, but now >and after one Month, I have Millions of rows in >the database. The searchfunctions of the >Database are now too slow and need Minutes to >scan the entire Table. >Is this a normal Problem, or should I use >PostgreSQL to solve this??? How can I solve this >Problem??? > >can u help me please?? >Simo > >_______________________________________________ >pmacct-discussion mailing list >http://www.pmacct.net/#mailinglists -- Matt Richard Access and Security Coordinator Computing Services Franklin & Marshall College [EMAIL PROTECTED] (717) 291-4157 _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
