Re: [pmacct-discussion] uacctd memory usage

2018-06-25 Thread Dariush Marsh-Mossadeghi
filter traffic with directions, networks and > > ports. > > I was testing an edge case where these plugins may rise up to 210 > > instances thus leading to this memory usage. Normally this will not be > > done so the normal case will be using 2.5 GB of RAM instead of 3.5

Re: [pmacct-discussion] uacctd memory usage

2018-06-25 Thread Dariush Marsh-Mossadeghi
> On 25 Jun 2018, at 14:32, Alex K wrote: > > Let me change the posting style... :) > > On Mon, Jun 25, 2018 at 3:51 PM, Dariush Marsh-Mossadeghi > mailto:dari...@gravitas.co.uk>> wrote: > OK, so we’re moving from bottom-posting to top-posting… that’ll make it >

Re: [pmacct-discussion] uacctd memory usage

2018-06-25 Thread Dariush Marsh-Mossadeghi
reserving quite some memory as they list first > in htop when sorted with memory. > > Thanx, > Alex > > > On Mon, Jun 25, 2018 at 2:22 PM, Dariush Marsh-Mossadeghi > mailto:dari...@gravitas.co.uk>> wrote: > >> On 25 Jun 2018, at 11:54, Alex K > <mail

Re: [pmacct-discussion] uacctd memory usage

2018-06-25 Thread Dariush Marsh-Mossadeghi
> On 25 Jun 2018, at 11:54, Alex K wrote: > > Hi all, > > I have a setup with uacctd monitoring traffic of several interfaces through > NFLOG. > With uacctd stopped I see that the server (a relatively small device with 4 > GB of RAM) consumes 450MB of RAM. Once I start uacctd the mem usage

Re: [pmacct-discussion] collecting large number of netflows

2016-08-04 Thread Dariush Marsh-Mossadeghi
For that sort of volume I’d investigate using and ELK stack on the backend and de-coupling pmacct from storage and analysis with a message queue like Rabbit. I’ve used this approach (not to that scale though) and it works well. ELK == ElasticSearch Logstash Kibana > > > On 08/04/2016 11:48

Re: [pmacct-discussion] Getting nfacctd to NOT aggregate ?

2016-04-19 Thread Dariush Marsh-Mossadeghi
estamp_end you can get the individual > flow records as opposed to aggregating the records. > > Robert Juric > > > > On Tue, Apr 19, 2016 at 9:00 AM, Dariush Marsh-Mossadeghi > <dari...@gravitas.co.uk <mailto:dari...@gravitas.co.uk>> wrote: > Hi List,