newbie rasql questions
George Jones
eludom at gmail.com
Wed Jun 23 12:09:45 EDT 2010
Thanks. Good info.
---George
On Wed, Jun 23, 2010 at 9:46 PM, Carter Bullard <carter at qosient.com> wrote:
> George,
> The only way to get duplicate rejection is to formulate keys so that the DB
> can
> know what constitutes equality. You can do that with this type of key:
>
> "-m stime srcid saddr daddr proto sport dport"
>
> and you'll have to make sure that you expose all of these fields in the
> database
> schema. rasqlinsert() will tell you if you don't expose the right fields
> using the
> "-s" option.
>
> But your performance is going to be less than stellar.
>
> I would suggest that you be careful, and avoid the performance
> hit, especially if its just for tests.
>
> Carter
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20100624/dd17233b/attachment.html>
More information about the argus
mailing list