Is it possible that the MySQL timestamps are set automagically by the
database, as part of the insert query, completely ignoring the timestamps
in the flow?
On Wed, Apr 1, 2015 at 1:30 PM, Steffen Plotner
wrote:
> Hi,
>
> We have a Palo Alto firewall and are trying to use pmacct to collect its
DNS lookups will effectively rate limit flow export, though, even if you're
hitting a cache. Do it after the fact in your presentation layer with a
cache, don't do it at the collection level, because you'll also have to
store it. I dunno what your flow volume is, but this is generally a bad
idea. Y
