rasqlinsert

[Carter Bullard]

Hmmm,  well one thing.   You don't want the "-M rmon" option.  That  
simply duplicates the records, and
reverses the flow key identifiers, so don't do that.

So, how many records per second do you expect to see?  You should  
probably be able to handle maybe
500 flows/sec with this strategy.

What is in your .rasqlinsertrc?
What does the database schema look like?
    % echo "desc argusFlows_2009_09_11" | mysql -u root

Carter


On Sep 11, 2009, at 1:27 PM, CS Lee wrote:

> hey carter,
>
> I'm using rasqlinsert to insert data to mysql db, and this erro  
> appears and rasqlinsert doesn't seem to insert any data even though  
> it is running -
>
> rasqlinsert(35236,0xa04b7720) malloc: *** error for object 0x610dd0:  
> incorrect checksum for freed object - object was probably modified  
> after being freed.
>                                                    *** set a  
> breakpoint in malloc_error_break to debug
>
> And the cpu consumption of rasqlinsert is quite scary -
>
>   PID COMMAND      %CPU   TIME   #TH #PRTS #MREGS RPRVT  RSHRD   
> RSIZE  VSIZE
> 35236 rasqlinser  63.9%  4:22.97   2    17     44 7112K   188K   
> 8224K    32M
>
> And it hits over 100% and never go below than that even though it  
> never insert any dat anymore. I'm using latest argus client 3.0.2  
> beta 12, the rasqlinsert command line i use is
>
> rasqlinsert -S localhost -w mysql://root@localhost/argusdb/argusFlows_%Y_%m_%d 
>  -F .rasqlinsertrc -M rmon -m none - ip
>
> Cheers ;)
>
> -- 
> Best Regards,
>
> CS Lee<geek00L[at]gmail.com>
>
> http://geek00l.blogspot.com
> http://defcraft.net

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20090911/be1e352c/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3815 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20090911/be1e352c/attachment.bin>