activecm / ipfix-rita

Collect IPFIX / Netflow v9 Records and Ship them to RITA for Analysis
https://www.activecountermeasures.com/
10 stars 1 forks source link

Ensure DB's import_finished field is marked on shutdown #35

Closed Zalgo2462 closed 5 years ago

Zalgo2462 commented 5 years ago

When the user runs ipfix-rita stop, it is fair to say that the user expects to be able to analyze any data collected during the current day. We currently do not support this.

If we naively mark the database's import_finished field on exit, then the system will become unstable if the user starts the program within the same day. This is due to the fact that IPFIX-RITA does not check if the import_finished flag is set to true before it starts writing out results.

In order to support clean shutdowns, we need to do one of two things:

Since the latter requires a change in RITA and the latter could build on the prior, I suggest we implement the first option to start.

Zalgo2462 commented 5 years ago

~We have decided to implement option number 1 for now.~

We've decided to just add a mark_finished.sh script.