From mccreary at ucar.edu  Mon Mar  8 16:53:42 2010
From: mccreary at ucar.edu (Sean McCreary)
Date: Mon, 08 Mar 2010 17:53:42 -0700
Subject: [TM] Cluster mode for TimeMachine
Message-ID: <4B959C16.3070504@ucar.edu>

At the Bro workshop a year ago, we had a brief discussion of cluster
mode support for TimeMachine.  The simplest design was a proxy that just
forwarded every request to each TimeMachine in a cluster, and then
merged the responses.  Has anyone worked on this sort of proxy?

From robin at icir.org  Mon Mar  8 19:56:05 2010
From: robin at icir.org (Robin Sommer)
Date: Mon, 8 Mar 2010 19:56:05 -0800
Subject: [TM] Cluster mode for TimeMachine
In-Reply-To: <4B959C16.3070504@ucar.edu>
References: <4B959C16.3070504@ucar.edu>
Message-ID: <20100309035605.GA78371@icir.org>


On Mon, Mar 08, 2010 at 17:53 -0700, you wrote:

> At the Bro workshop a year ago, we had a brief discussion of cluster
> mode support for TimeMachine.  The simplest design was a proxy that just
> forwarded every request to each TimeMachine in a cluster, and then
> merged the responses.  Has anyone worked on this sort of proxy?

No, not really. We had a student making an attempt but I never saw
any actual code coming out of that. It's still on the wish-list
though, I'd like to have it as well.

Robin

-- 
Robin Sommer * Phone +1 (510) 666-2886 * robin at icir.org 
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org

From time-machine at ICSI.Berkeley.EDU  Thu Mar 18 11:47:57 2010
From: time-machine at ICSI.Berkeley.EDU (Time Machine Tracker)
Date: Thu, 18 Mar 2010 18:47:57 -0000
Subject: [TM] [The Time Machine] #1: Initialize broccoli library
Message-ID: <054.e00d80b0d098e03e6d657cbe1afe623f@icsi.berkeley.edu>

#1: Initialize broccoli library
------------------------+---------------------------------------------------
 Reporter:  justin      |       Owner:  somebody
     Type:  defect      |      Status:  new     
 Priority:  critical    |   Milestone:          
Component:  component1  |     Version:          
 Keywords:              |  
------------------------+---------------------------------------------------
 newer broccoli library needs to be initialize, otherwise you get

 {{{
 Broccoli error: bro_conn_new_socket called without prior initialization.
 Initialization of the Broccoli library is now required.
 }}}

-- 
Ticket URL: <http://tracker.icir.org/time-machine/ticket/1>
The Time Machine <http://tracker.icir.org/time-machine>
High-volume network traffic stream recorder.


From time-machine at ICSI.Berkeley.EDU  Thu Mar 18 11:49:00 2010
From: time-machine at ICSI.Berkeley.EDU (Time Machine Tracker)
Date: Thu, 18 Mar 2010 18:49:00 -0000
Subject: [TM] [The Time Machine] #2: Man page
Message-ID: <054.363b89cc801e1c4d420aec683dd3f1cc@icsi.berkeley.edu>

#2: Man page
-------------------------+--------------------------------------------------
 Reporter:  justin       |       Owner:  somebody
     Type:  enhancement  |      Status:  new     
 Priority:  blocker      |   Milestone:          
Component:  component1   |     Version:          
 Keywords:               |  
-------------------------+--------------------------------------------------
 Wrote this man page as part of trying to debianize tm

-- 
Ticket URL: <http://tracker.icir.org/time-machine/ticket/2>
The Time Machine <http://tracker.icir.org/time-machine>
High-volume network traffic stream recorder.


From time-machine at ICSI.Berkeley.EDU  Thu Mar 18 11:50:52 2010
From: time-machine at ICSI.Berkeley.EDU (Time Machine Tracker)
Date: Thu, 18 Mar 2010 18:50:52 -0000
Subject: [TM] [The Time Machine] #3: tweak default config file slightly
Message-ID: <054.a817a565a9c72732434a3049a423a5be@icsi.berkeley.edu>

#3: tweak default config file slightly
------------------------+---------------------------------------------------
 Reporter:  justin      |       Owner:  somebody
     Type:  defect      |      Status:  new     
 Priority:  blocker     |   Milestone:          
Component:  component1  |     Version:          
 Keywords:              |  
------------------------+---------------------------------------------------
 some suggestions

 default log level grows to fast
 {{{
 -    log_interval 10;
 +    log_interval 600;
 }}}

 make default disk size a bit more conservative
 {{{
 - disk 350g;
 - filesize 500g;
 + disk 5g;
 + filesize 1g;
 }}}

 add class example
 {{{
 #class "http" {
 # filter "port 80";
 # precedence 6;
 # cutoff 25k;
 # disk 10g;
 # filesize 1g;
 # mem 150m;
 # pkts_to_disk 2;
 #}

 }}}

-- 
Ticket URL: <http://tracker.icir.org/time-machine/ticket/3>
The Time Machine <http://tracker.icir.org/time-machine>
High-volume network traffic stream recorder.


From time-machine at ICSI.Berkeley.EDU  Thu Mar 18 11:51:39 2010
From: time-machine at ICSI.Berkeley.EDU (Time Machine Tracker)
Date: Thu, 18 Mar 2010 18:51:39 -0000
Subject: [TM] [The Time Machine] #3: tweak default config file slightly
In-Reply-To: <054.a817a565a9c72732434a3049a423a5be@icsi.berkeley.edu>
References: <054.a817a565a9c72732434a3049a423a5be@icsi.berkeley.edu>
Message-ID: <063.753320f2ac0df43083572811ec4ff428@icsi.berkeley.edu>

#3: tweak default config file slightly
------------------------+---------------------------------------------------
 Reporter:  justin      |       Owner:  somebody
     Type:  task        |      Status:  new     
 Priority:  blocker     |   Milestone:          
Component:  component1  |     Version:          
 Keywords:              |  
------------------------+---------------------------------------------------
Changes (by seth):

  * type:  defect => task


-- 
Ticket URL: <http://tracker.icir.org/time-machine/ticket/3#comment:1>
The Time Machine <http://tracker.icir.org/time-machine>
High-volume network traffic stream recorder.