Re: [Nfsen-discuss] profile size

[Peter H. <ha...@sw...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Maurizio

- -------- Original Message  --------
From: Maurizio Molina <mau...@da...>
To: nfsen-discuss ML <nfs...@li...>
Subject: [Nfsen-discuss] profile size
Date: Wed Jul 12 2006 12:46:06 GMT+0200 (CEST)

> Hi Peter,
> a while ago, when I said I wanted to automatically create 400 profiles,
> you replied me:
> 
> "In theory, you could do that with a shell script, as the command line
> tool 'nfsen' allows you to setup profiles easily. But current nfsen stores
> data along with any existing profile, which means you get a lange amount
> of additional data with 400 profiles. However, you could expire the data on
> a tight schedule. Upcoming nfsen-1.3 will include new profile type - shadow,
> which does not store any additional data."
> 
> Now, I'm noting that the profile size that you can control and  expire
> "on a tight schedule"  is actually only the one relative to raw netflow
> data, while there is a fixed size for the creation of all the .gif and
> .rrd files which (mainly due to the .rrd files) is on my system around
> 57 Mbytes.
> 
> So:
> 1) when you say that the shadow profiles will not store any additional
> data, what part are you referrig to? raw data or .rrd?

This refere to the raw data, which means rrd files as well as the gif files are still there to display the profile graphs.

> 2) would it be simple to disable the creation of  all these "variants"
> of rrd files (for example keep only the "traffic.rrd" file) or would
> nfsen crash because it's not able to find the data to create/update all
> the .gif files?

Hmm ... by design the rrd and graph files need to exist. However, nfsen does not crash, if you delete unwanted rrd/.gif files, but it complains about missing files and shows broken icons in the page.
But 400 Profiles is about 23GB in space - which is not be that amount of space on decent systems - specially, when dealing with netflow data :)

	- Peter


> 
> Thanks,
> Maurizio
> 
> 
> 
> -------------------------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> _______________________________________________
> Nfsen-discuss mailing list
> Nfs...@li...
> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
> 

- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag,  Security Engineer,  Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA  FB 84 CA 94 AB FC 5D D7
SWITCH,  Limmatquai 138,  CH-8001 Zurich,  Switzerland
E-mail: pet...@sw... Web: http://www.switch.ch/security
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (Darwin)

iQCVAwUBRLTcjf5AbZRALNr/AQL0LQP/YldNEXkjHbP5kCPBZSBgmo/4W4/MgTCu
Y40hACpdOgg3DkAkFAQHqyOB+ID8pmZMvOrAc56Jr0ad6skpMB5EUySbUnL+eQMP
DXIMwqve3teLeXjXyZr5DDaaeYS+oon1H/rGVNd5NIeYvO9L1ElmDuQK63ybtQ3E
6Qi6+adO1FY=
=hzmP
-----END PGP SIGNATURE-----