Re: [Nfsen-discuss] feature rq: filter location

[Peter H. <ha...@sw...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Ivan,
It seems, you had a busy evening/night :)

- -------- Original Message  --------
From: "Ivan A. Beveridge" <iv...@li...>
To: nfsen-discuss ML <nfs...@li...>
Subject: [Nfsen-discuss] feature rq: filter location
Date: Wed Jul 19 2006 23:00:45 GMT+0200 (CEST)

> Hi Peter,
> 
> Would it be possible/sensible to have the default location for the
> profile's filter file (filter.txt) in ${PROFILESTATDIR}/PROFILE/
> .. rather than ${PROFILEDATADIR}/PROFILE/ ? It would seem a logical
> place to put it (the profile.dat is in there), and it's a small file.
> 

The filter file will move anyway in next nfsen version, as profiles will no longer be based strictly on a 1:1 relation of flow sources. It means that each profile may contain any number of channels,
where each channel may have it's own filter ( and therefore file ). This gives a lot more flexibility for creating profiles, and old style profiles will still be compatible, as each channel will
reflect a netflow source, with each of the channels having the same filter. So several filter files will exist in new nfsen, and therefore need to be reorganized anyway.

> Primarily this would mean that only the large nfcapd datafiles will go
> into ${PROFILEDATADIR} rather than any config.

PROFILESTATDIR would be most likely the most appropriate place, I agree.

> 
> It would obviously mean that an upgrade would require duplicating/moving
> the filter files (or changing their location in the profile.dat).

Ohh - this is really the least problem, when upgrading. As I survived coding the RRD upgrade procedure, to convert RRD files from profile based to channel based RRD files, I'm no longer afraid of
moving/splitting/recreating/... filter files :)

	- Peter

> 
> Thoughts?
> 
> Cheers
> 
> 
> Ivan
> 

- -------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Nfsen-discuss mailing list
Nfs...@li...
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss


- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag,  Security Engineer,  Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA  FB 84 CA 94 AB FC 5D D7
SWITCH,  Limmatquai 138,  CH-8001 Zurich,  Switzerland
E-mail: pet...@sw... Web: http://www.switch.ch/security
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (Darwin)

iQCVAwUBRL8oEP5AbZRALNr/AQKiigP+Ii/oLS8J/HQF/+pBvxD63lBNXT8f0xHr
XRriGeZZF2krS4VzwMexltq0a/txa2y8imT+ID2P1XMBTdxsIFwFJu0U7BgUDfAP
O70tO56wk1QbhG9Assl7t2te8589Mnbj8eXHXHz4rF7AfixSJAOrFYiAEb7Ru/zv
Ik5tnLs++iI=
=QLWc
-----END PGP SIGNATURE-----