gamelinux / cxtracker

Connection Tracker is a passive network connection tracker for profiling, history, auditing and network discovery.

Home Page:http://www.gamelinux.org/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Feature Proposal: Option to store pcaps to dated directories.

wmesser opened this issue · comments

I don't know if this would be good or not, but I could see it being useful.

This is low priority for me but is something that would slightly complicate the step of roll-off in #16, so I'm going ahead and talking about it now.

Vision: pcaps are logged to directories like /pcaps/2013-01-15/cxt.eth0.1358251200

This might make management on disk easier for two reasons:

  1. It breaks up storage into multiple directories
  2. It names the directories in such a way that retrieval is easier

Downside:

  1. OpenFPC currently does not expect pcaps logged by date
  2. Creates slight complications for automated retrieval because figuring out directory becomes a necessary step. However, since the directory is the date, and the date is trivially determined in code, automated retrieval is still possible.

Addressed in #18