gamelinux / cxtracker

Connection Tracker is a passive network connection tracker for profiling, history, auditing and network discovery.
http://www.gamelinux.org/
46 stars 24 forks source link

Feature Proposal: Option to store pcaps to dated directories. #17

Closed wmesser closed 10 years ago

wmesser commented 11 years ago

I don't know if this would be good or not, but I could see it being useful.

This is low priority for me but is something that would slightly complicate the step of roll-off in https://github.com/gamelinux/cxtracker/issues/16, so I'm going ahead and talking about it now.

Vision: pcaps are logged to directories like /pcaps/2013-01-15/cxt.eth0.1358251200

This might make management on disk easier for two reasons: 1) It breaks up storage into multiple directories 2) It names the directories in such a way that retrieval is easier

Downside: 1) OpenFPC currently does not expect pcaps logged by date 2) Creates slight complications for automated retrieval because figuring out directory becomes a necessary step. However, since the directory is the date, and the date is trivially determined in code, automated retrieval is still possible.

wmesser commented 11 years ago

Addressed in https://github.com/gamelinux/cxtracker/pull/18

gamelinux commented 10 years ago

merged