newbie rasql questions

George Jones eludom at gmail.com
Wed Jun 23 12:09:45 EDT 2010


Thanks.  Good info.

---George

On Wed, Jun 23, 2010 at 9:46 PM, Carter Bullard <carter at qosient.com> wrote:

> George,
> The only way to get duplicate rejection is to formulate keys so that the DB
> can
> know what constitutes equality.  You can do that with this type of key:
>
>    "-m stime srcid saddr daddr proto sport dport"
>
> and you'll have to make sure that you expose all of these fields in the
> database
> schema.  rasqlinsert() will tell you if you don't expose the right fields
> using the
> "-s" option.
>
> But your performance is going to be less than stellar.
>
> I would suggest that you be careful, and avoid the performance
> hit, especially if its just for tests.
>
> Carter
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20100624/dd17233b/attachment.html>


More information about the argus mailing list