Re: customizing ntopng expired flow exports to MySQL

Emanuele Faranda <[email protected]> Tue, 5 Nov 2019 10:42:21 +0100
Newsgroups gmane.linux.ntop.general
Message-ID <[email protected]>
This is a multi-part message in MIME format.
--===============5437531245571169495==
Content-Type: multipart/alternative;
	boundary="------------B012692363A1ED2657A43D3B"
Content-Language: en-US-large

This is a multi-part message in MIME format.
--------------B012692363A1ED2657A43D3B
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 8bit

Hi,

You can manually edit the source file for MySQL export: 
https://github.com/ntop/ntopng/blob/dev/src/MySQLDB.cpp . 
MySQLDB::dumpFlow is the function called to export the flow information.

Regards,

Emanuele

On 11/4/19 4:47 PM, Christina Phillips wrote:
>
> I am aware that MAC addresses are not exported and that this was 
> discussed back in 2016.  Can this be added independently when ntopng 
> is compiled?  I am asking because I am trying to design a single board 
> discovery system that would use MySQL to passively discover devices in 
> a network.
>
> We are designing the unit to have significant disk space (500GB)
>
> *christina phillips*/ Director,  IT Security Practice
>
> *Independent Network Consultants*
> *e:*[email protected] <mailto:[email protected]>*m:*  703.626.0385
>
> http://incsecurity.wordpress.com <http://incsecurity.wordpress.com/>
>
> Twitter: https://twitter.com/ITSecurityNinja
>
> LinkedIn: www.linkedin.com/in/ChristinaPMBA 
> <http://www.linkedin.com/in/ChristinaPMBA>
>
>
> _______________________________________________
> Ntop mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop

--------------B012692363A1ED2657A43D3B
Content-Type: text/html; charset=windows-1252
Content-Transfer-Encoding: 8bit

<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html;
      charset=windows-1252">
  </head>
  <body>
    <p>Hi,</p>
    <p>You can manually edit the source file for MySQL export:
      <a class="moz-txt-link-freetext" href="https://github.com/ntop/ntopng/blob/dev/src/MySQLDB.cpp">https://github.com/ntop/ntopng/blob/dev/src/MySQLDB.cpp</a> .
      MySQLDB::dumpFlow is the function called to export the flow
      information.</p>
    <p>Regards,</p>
    <p>Emanuele<br>
    </p>
    <div class="moz-cite-prefix">On 11/4/19 4:47 PM, Christina Phillips
      wrote:<br>
    </div>
    <blockquote type="cite"
cite="mid:BN6PR1801MB19872DEC22F3DCA46E0DCC34C67F0@BN6PR1801MB1987.namprd18.prod.outlook.com">
      <meta http-equiv="Content-Type" content="text/html;
        charset=windows-1252">
      <meta name="Generator" content="Microsoft Word 15 (filtered
        medium)">
      <style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:"Trebuchet MS";
	panose-1:2 11 6 3 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:#0563C1;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:#954F72;
	text-decoration:underline;}
span.EmailStyle17
	{mso-style-type:personal-compose;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-family:"Calibri",sans-serif;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
      <div class="WordSection1">
        <p class="MsoNormal">I am aware that MAC addresses are not
          exported and that this was discussed back in 2016.  Can this
          be added independently when ntopng is compiled?  I am asking
          because I am trying to design a single board discovery system
          that would use MySQL to passively discover devices in a
          network.<o:p></o:p></p>
        <p class="MsoNormal"><o:p> </o:p></p>
        <p class="MsoNormal">We are designing the unit to have
          significant disk space (500GB)<o:p></o:p></p>
        <p class="MsoNormal"><o:p> </o:p></p>
        <p class="MsoNormal"><b><span
              style="font-size:8.5pt;font-family:&quot;Trebuchet
MS&quot;,sans-serif;color:#0070C0;text-transform:uppercase;letter-spacing:1.5pt">christina
              phillips</span></b><span
            style="font-size:8.5pt;font-family:&quot;Trebuchet
            MS&quot;,sans-serif;color:#0070C0"> </span><span
            style="font-size:8.5pt;font-family:&quot;Trebuchet
            MS&quot;,sans-serif;color:#888888">/ Director,  IT Security
            Practice</span><span style="color:#1F497D"><o:p></o:p></span></p>
        <p class="MsoNormal"><b><span
              style="font-size:8.5pt;font-family:&quot;Trebuchet
MS&quot;,sans-serif;color:#0070C0;text-transform:uppercase;letter-spacing:1.5pt">Independent
              Network Consultants</span></b><span
            style="font-size:8.5pt;font-family:&quot;Trebuchet
            MS&quot;,sans-serif;color:#888888"><br>
            <b>e:</b></span><span
            style="font-size:8.5pt;font-family:&quot;Trebuchet
            MS&quot;,sans-serif;color:#B2B2B2"> </span><span
            style="color:#1F497D"><a href="mailto:[email protected]"
              moz-do-not-send="true"><span
                style="font-size:8.5pt;font-family:&quot;Trebuchet
                MS&quot;,sans-serif;color:blue">[email protected]</span></a></span><span
            style="font-size:8.5pt;font-family:&quot;Trebuchet
            MS&quot;,sans-serif;color:#B2B2B2">  </span><b><span
              style="font-size:8.5pt;font-family:&quot;Trebuchet
              MS&quot;,sans-serif;color:#888888">m:</span></b><span
            style="font-size:8.5pt;font-family:&quot;Trebuchet
            MS&quot;,sans-serif;color:#B2B2B2">  703.626.0385<o:p></o:p></span></p>
        <p class="MsoNormal"><span
            style="font-size:8.5pt;font-family:&quot;Trebuchet
            MS&quot;,sans-serif;color:#B2B2B2"><a
              href="http://incsecurity.wordpress.com/"
              moz-do-not-send="true"><span style="color:blue">http://incsecurity.wordpress.com</span></a><o:p></o:p></span></p>
        <p class="MsoNormal"><span
            style="font-size:8.5pt;font-family:&quot;Trebuchet
            MS&quot;,sans-serif;color:#B2B2B2">Twitter:
            <a href="https://twitter.com/ITSecurityNinja"
              moz-do-not-send="true"><span style="color:blue">https://twitter.com/ITSecurityNinja</span></a><o:p></o:p></span></p>
        <p class="MsoNormal"><span
            style="font-size:8.5pt;font-family:&quot;Trebuchet
            MS&quot;,sans-serif;color:#B2B2B2">LinkedIn: 
          </span><span
            style="font-size:8.5pt;font-family:&quot;Trebuchet
            MS&quot;,sans-serif"><a
              href="http://www.linkedin.com/in/ChristinaPMBA"
              moz-do-not-send="true"><span style="color:blue">www.linkedin.com/in/ChristinaPMBA</span></a><o:p></o:p></span></p>
        <p class="MsoNormal"><o:p> </o:p></p>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <pre class="moz-quote-pre" wrap="">_______________________________________________
Ntop mailing list
<a class="moz-txt-link-abbreviated" href="mailto:[email protected]">[email protected]</a>
<a class="moz-txt-link-freetext" href="http://listgateway.unipi.it/mailman/listinfo/ntop">http://listgateway.unipi.it/mailman/listinfo/ntop</a></pre>
    </blockquote>
  </body>
</html>

--------------B012692363A1ED2657A43D3B--

--===============5437531245571169495==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
--===============5437531245571169495==--