Re: [pmacct-discussion] PostgreSQL performance
Hi all, Sven Anderson, 21.04.2006 21:34: I think the problem is not the updating of the data itself, but updating the complex primary key. An index of (ip_src, ip_dst, stamp_inserted) is fast enough to find entries, and easy enough to maintain. it seems to be known, that a default MySQL performs a lot better than a default PostgreSQL. One difference is, that PostgreSQL is doing an COMMIT after each INSERT/UPDATE, which results in an fsync() call, if fsync = true in postgresql.conf. See this article: http://monstera.man.poznan.pl/wiki/index.php/Mysql_vs_postgres Paolo, are you using transactions in the PostgreSQL plugin, to COMMIT all UPDATES in one bunch? I couldn't clearly see it in the source code. BTW.: What is the best indexing to make a select with WHERE stamp_inserted=2006-04-21 20:17:55 AND stamp_inserted2006-04-21 21:17:55 fast? I guess a btree index, but maybe there's something better? This question is still open. No DBMS gurus here? ;-) Cheers, Sven -- Sven Anderson Institute for Informatics - http://www.ifi.informatik.uni-goettingen.de Georg-August-Universitaet Goettingen Lotzestr. 16-18, 37083 Goettingen, Germany ___ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
[pmacct-discussion] pmacct's place in the network... passive host?
Hi- I am trying to get a handle on traffic on a network, which has some old-osh equipment and we cant really cant get what we need/want from our firewall, router etc. I box that was setup to run Snort, with a passive Ethernet tap between our router and firewall. Eth0 is LAN Eth1 is Inbound traffic (in promiscuous mode) thru tap Eth2 is outbound traffic (in promiscuous mode ) thru tap in promiscuous mode Pmacct looks like a great tool and I'd love to give it a try. I did search a bit on the archives, but didn't find much. Im very sorry if this has been covered recently. Can I run pmacct on my (Fedora) system that is seeing all in/out traffic (for snort) that is on a passive Ethernet tap? Is it as easy as downloading and setting it up? I guess the conflicts im wondering about would be does pmacct care that there is no IP on the interface and that its in promiscuous mode? Thanks very much in advance; I appreciate it. duncan Duncan Shannon Techfluent, Inc. (P) 612-338-1300 (F) 612-638-1310 [EMAIL PROTECTED] www.techfluent.com ___ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
