Thanks Edward, I will check triggers.sql.
Andras On Tue, Jun 18, 2013 at 5:04 PM, Edward van Kuik <edw...@nitric.co.za>wrote: > Hi > > What I do is I use triggers which create some summary tables for me as it > inserts. > I've attached my trigger sql in case you find it helpful. > > I insert it into tables with partitioning by range. But the system is > generally still quite slow. (I currently have 1.3 billion rows) > I am thinking of inserting the data and summary data into another type of > database, like mongo. > > Edward > > > > > On 18/06/2013 16:34, Andras Horvai wrote: > > Hello, > > > This is what I would like to achieve: > I would like to have a history of ip connections of my network, let's say > back to 90 days. So to achieve this I understand that I have to aggregate > in > nfacctd. > Here is the aggregate what I tried: > > aggregate: src_host,dst_host,src_port,dst_port,proto > > The problem is when I do this type of aggregate my system slows > down very much. (I cannot run a simple query in mysql so I cannot > get the information what I need... so the collection is useless). > > I tried to distinguish the in and out traffic with plugins, > but did not help me regarding the performance. > The only way what does not slows down my system if I aggregate only > src or dst addresses (and separate these into different tables). > But with this only aggregate, I lost the information about the src_port, > dst_port and protocol (per ip pairs) > > I would like to monitor the traffic of 400 hosts. > Is it possible with a server with > 4 cores (Intel(R) Xeon(R) CPU E5603 @ 1.60GHz) > and with 4 GB of rams. > > Flow exporter is a L3 cisco siwtch in the core of the network. It has > vlans defined to them. I am interested in the traffic between local vlanand > local > vlan, and between local vlan and Internet (or external network). > > Thanks, > > Andras > > > _______________________________________________ > pmacct-discussion mailing listhttp://www.pmacct.net/#mailinglists > > > > -- > Edward van Kuik > Nitric Software Laboratory > 78 Strand Street > Tel: 021 300 1073 > Cell: 083 645 6443http://nitric.co.za/ > > > _______________________________________________ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists >
_______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
