[pmacct-discussion] PostgreSQL performance

2006-04-07 Thread Sven Anderson
correctly? Any ideas? Cheers, Sven -- Sven Anderson Institute for Informatics - http://www.ifi.informatik.uni-goettingen.de Georg-August-Universitaet Goettingen Lotzestr. 16-18, 37083 Goettingen, Germany

Re: [pmacct-discussion] PostgreSQL performance

2006-04-10 Thread Sven Anderson
hard disk. But with MySQL it was no problem, so I'm just comparing. Cheers, Sven -- Sven Anderson Institute for Informatics - http://www.ifi.informatik.uni-goettingen.de Georg-August-Universitaet Goettingen Lotzestr. 16-18, 37083 Goettingen, Germany

Re: [pmacct-discussion] network port monitoring

2006-04-19 Thread Sven Anderson
values. Just give me 2 more weeks and I'll release a first version. Cheers, Sven -- Sven Anderson Institute for Informatics - http://www.ifi.informatik.uni-goettingen.de Georg-August-Universitaet Goettingen Lotzestr. 16-18, 37083 Goettingen, Germany

Re: [pmacct-discussion] PostgreSQL performance

2006-04-22 Thread Sven Anderson
index, but maybe there's something better? Cheers, Sven -- Sven Anderson Institute for Informatics - http://www.ifi.informatik.uni-goettingen.de Georg-August-Universitaet Goettingen Lotzestr. 16-18, 37083 Goettingen, Germany ___ pmacct-discussion mailing

Re: [pmacct-discussion] PostgreSQL performance

2006-04-28 Thread Sven Anderson
Hi all, Sven Anderson, 21.04.2006 21:34: I think the problem is not the updating of the data itself, but updating the complex primary key. An index of (ip_src, ip_dst, stamp_inserted) is fast enough to find entries, and easy enough to maintain. it seems to be known, that a default MySQL

Re: [pmacct-discussion] pmacct's place in the network... passive host?

2006-04-29 Thread Sven Anderson
-- Sven Anderson Institute for Informatics - http://www.ifi.informatik.uni-goettingen.de Georg-August-Universitaet Goettingen Lotzestr. 16-18, 37083 Goettingen, Germany ___ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists

[pmacct-discussion] memory table extraction lossless?

2006-05-03 Thread Sven Anderson
list is processed. Otherwise packets that arrive during processing with, for example, port 80, would also match the * and got reset, too. Is this handled correctly? Cheers, Sven -- Sven Anderson Institute for Informatics - http://www.ifi.informatik.uni-goettingen.de Georg-August-Universitaet

Re: [pmacct-discussion] memory table extraction lossless?

2006-05-03 Thread Sven Anderson
data. What should be noted in the docs at least is, that * refers to the sum of all traffic without the -r, and the rest of traffic with the -r flag, as a consequence of the stepwise resetting of the counters. Don't you think so? Cheers, Sven -- Sven Anderson Institute for Informatics - http

Re: [pmacct-discussion] memory table extraction lossless?

2006-05-03 Thread Sven Anderson
Ciao Paolo, Paolo Lucente, 03.05.2006 16:41: On Wed, May 03, 2006 at 03:28:22PM +0200, Sven Anderson wrote: Is there a case, when using the -r flag, where you don't want locking? Or do you mean, that -l could be useful in case of not using -r? The latter. You can think at it like a macro

Re: [pmacct-discussion] PostgreSQL performance

2006-05-12 Thread Sven Anderson
fast because it has barely any records in it. acct_daily has much less records then acct_hourly. Sounds like the different resolution time lines that are used to be created with RRDTool. Cheers, Sven -- Sven Anderson Institute for Informatics - http://www.ifi.informatik.uni-goettingen.de

Re: [pmacct-discussion] dynamic table names

2006-05-12 Thread Sven Anderson
Hi Jamie, Jamie Wilkinson, 03.05.2006 02:52: It's outside the transaction, so it doesn't blow up horridly. It is annoying to see 3600 messages in your logs, sure. well it's 1440 per day for me. That's not so nice, I will solve it with a cronjob. Cheers, Sven -- Sven Anderson Institute

Re: [pmacct-discussion] PostgreSQL performance

2006-05-12 Thread Sven Anderson
is stored. ;-) Cheers, Sven -- Sven Anderson Institute for Informatics - http://www.ifi.informatik.uni-goettingen.de Georg-August-Universitaet Goettingen Lotzestr. 16-18, 37083 Goettingen, Germany ___ pmacct-discussion mailing list http

Re: [pmacct-discussion] Comparing nfacctd and pmacctd

2006-05-23 Thread Sven Anderson
and metered on both interfaces, so that you can export two flows, which are linked somehow, for example with a FlowID. But if at all, this is only possible with Netflow v9 or IPFIX. Hope, that helps a bit. Cheers, Sven -- Sven Anderson Institute for Informatics - http://www.ifi.informatik.uni

Re: [pmacct-discussion] PostgreSQL performance

2006-05-31 Thread Sven Anderson
the tcom_v5_20060530_idx, the query was answered in 20 seconds. ? Cheers, Sven -- Sven Anderson Institute for Informatics - http://www.ifi.informatik.uni-goettingen.de Georg-August-Universitaet Goettingen Lotzestr. 16-18, 37083 Goettingen, Germany ___ pmacct

Re: [pmacct-discussion] pmacctd - netflow/sflow export

2006-07-11 Thread Sven Anderson
Hi all, Paolo Lucente, 05.07.2006 01:07: while the idea of integrating a kind of sFlow/NetFlow probe has been already considered (i remember some thoughts recently exchanged with Sven Anderson about this), i'm somewhat not fully convinced. [...] Integrating either the probe

Re: [pmacct-discussion] raw data - question

2006-07-11 Thread Sven Anderson
as an argument for an data-access API, which I proposed in the other mail. Cheers, Sven -- Sven Anderson Institute for Informatics - http://www.ifi.informatik.uni-goettingen.de Georg-August-Universitaet Goettingen Lotzestr. 16-18, 37083 Goettingen, Germany

Re: [pmacct-discussion] Help, nfacctd cannot read Netflow v9 data from Cisco router

2006-07-17 Thread Sven Anderson
also uses templates to define flows. What happens so far with a template and the according data, which contain flow keys that don't exists in the pmacct flow table? Are they dropped? Cheers, Sven -- Sven Anderson Institute for Informatics - http://www.ifi.informatik.uni-goettingen.de Georg-August

Re: [pmacct-discussion] Templates (was: Help, nfacctd cannot read Netflow v9 data from Cisco router)

2006-07-18 Thread Sven Anderson
, an there is no column for MPLS_LABEL_1. Cheers, Sven -- Sven Anderson Institute for Informatics - http://www.ifi.informatik.uni-goettingen.de Georg-August-Universitaet Goettingen Lotzestr. 16-18, 37083 Goettingen, Germany ___ pmacct-discussion mailing

Re: [pmacct-discussion] Classification

2006-11-07 Thread Sven Anderson
one is probably not really necessary, as you can calculate it from the other timestamps and the configuration, but it would give you a good index-key for the time-slots. Cheers, Sven -- Sven Anderson Institute for Informatics - http://www.ifi.informatik.uni-goettingen.de Georg-August

Re: [pmacct-discussion] Classification

2006-11-16 Thread Sven Anderson
threats) you might reach this limit earlier. Cheers, Sven -- Sven Anderson Institute for Informatics - http://www.ifi.informatik.uni-goettingen.de Georg-August-Universitaet Goettingen Lotzestr. 16-18, 37083 Goettingen, Germany ___ pmacct-discussion

Re: [pmacct-discussion] pmacct measures less traffic than ethereal does

2007-01-09 Thread Sven Anderson
and stuff like that. Cheers, Sven -- Sven Anderson Institute for Informatics - http://www.ifi.informatik.uni-goettingen.de Georg-August-Universitaet Goettingen Lotzestr. 16-18, 37083 Goettingen, Germany ___ pmacct-discussion mailing list http

Re: [pmacct-discussion] pmacct measures less traffic than ethereal does

2007-01-16 Thread Sven Anderson
, to avoid unwanted traffic. Cheers, Sven -- Sven Anderson Institute for Informatics - http://www.ifi.informatik.uni-goettingen.de Georg-August-Universitaet Goettingen Lotzestr. 16-18, 37083 Goettingen, Germany ___ pmacct-discussion mailing list http

Re: [pmacct-discussion] Dynamic Table not created

2009-04-09 Thread Sven Anderson
. No, the link at the bottom doesn't help. But this link does: http://www.pmacct.net/mailman/listinfo/pmacct-discussion (look at the bottom of the page) Regards, Sven -- Sven Anderson Institute of Computer Science - University of Goettingen Goldschmidtstr. 7, 37077 Goettingen, Germany http