Re: [Sguil-devel] More power, please?
Status: Beta
Brought to you by:
bamm
From: Bamm V. <ba...@sa...> - 2003-02-20 15:29:18
|
It's not a "size" thing. I have never really liked the idea of sensors doing INSERTs, etc. I'd rather have central loading facility. If all comms were sent over a single comms channel it becomes easier employ encryption (tcl has an SSL extension for sockets). You and I might have dedicated VPNs for getting data securely back to the NOC, but I think an "internal" solution for accomplishing this is a good thing. Bammkkkk On Thu, Feb 20, 2003 at 11:10:29PM +0800, Michael Boman wrote: > On Thu, Feb 20, 2003 at 08:03:48AM -0600, Bamm Visscher wrote: > > Yes it could, but I was trying to refrain from putting those libs on > > the sensor. Matter of fact, I have been mulling over having BY send RT > > events to sensor_agent, who would forward them up to sguild for insertion > > into the DB. This way the mysql libs could be removed from the sensor. I > > like the idea of having a single comm tunnel from the sensor the central > > server. > > > > Bammkkkk > > Let me get this straight. You are against putting libmysqlclient.so on > the sensor, but are willing to stick TCL there? I don't get it. TCL is > tens of times bigger then libmysqlclient... (libmysqlclient.so is 248k > on this machine, while /usr/lib/tcl8.3 is 2.2 Mb) > > /Mike > |