Hi Thomas, sorry for replying late. pmacct doesn't support writing directly to flat files. This is mainly for the little motivation in merely duplicating others work (ie. flow-tools, sflowtool and the likes).
However these don't cover the "read from libpcap write to a flat file" scenario. I would give you two advices: a) Try to address the large footprint in the RDBMS with classic tecniques, ie. rotating data, dumping old data out of the DB (into CSV files for example), writing in multiple tables at different time resolutions and expiring more detailed data first. b) If the above doesn't apply a further clean solution is: use pmacctd to collect your data troubh libpcap and convert it into NetFlow. Use an established package, ie. flow-tools, to write to flat-files; point the NetFlow stream coming from pmacctd to this application. It's also modular as you can run the two applications together on the same box or segregate them in different places. Cheers, Paolo On Sat, Jul 28, 2007 at 01:10:58PM +0200, Thomas Fragstein wrote: > Hi Group, > > it is possible that i can write flatfiles with pmacctd? > > my problem is the database. > the database blow up with 10gb on an low traffic day. > > i think: an compressed flatfile will be the best > > sorry for my bad english > > thx > Thomas _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
