ack fullfill database

classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

ack fullfill database

Leandro
Hi guys,
I would like to know what is the propper way to get the las ack sended
by dhcpd and update a plain text / database register ?
Currently Im running a tail perl script on the dhcp log file and with a
regular expression I take the ACKs.
This method is ok for a littel amount of request, but it seems that
after the 10k requests , some ACKs are not parsed.
Is there for example a logging facility to take ONLY the ACKs ? It would
be very nice.

Regards.
Leandro.

_______________________________________________
dhcp-users mailing list
[hidden email]
https://lists.isc.org/mailman/listinfo/dhcp-users
Reply | Threaded
Open this post in threaded view
|

RE: ack fullfill database

Akey, Michael
I can't speak to the proper way, but I can say we also have a perl script tailing our dhcpd log for ACKs and stuffing them into a MySQL database.  If you're losing ACKs it seems you might have some sort of throughput issue with regards to logging or your script.  We don't filter at all and our script has been running fine for 10+ years with tens of thousands of clients.

If you did want to have your script only see ACKs, you could use syslog-ng and the message() filter to only find lines with DHCPACK and write those to a log file.  That's just one example, I'm sure other logging software can do similar.

In any case, if there's a better way I'd love to hear about it.

Mike Akey
Information Services
Oregon State University
541-737-4948

________________________________________
From: [hidden email] [[hidden email]] on behalf of Leandro [[hidden email]]
Sent: Tuesday, December 01, 2015 9:52 AM
To: Users of ISC DHCP
Subject: ack fullfill database

Hi guys,
I would like to know what is the propper way to get the las ack sended
by dhcpd and update a plain text / database register ?
Currently Im running a tail perl script on the dhcp log file and with a
regular expression I take the ACKs.
This method is ok for a littel amount of request, but it seems that
after the 10k requests , some ACKs are not parsed.
Is there for example a logging facility to take ONLY the ACKs ? It would
be very nice.

Regards.
Leandro.

_______________________________________________
dhcp-users mailing list
[hidden email]
https://lists.isc.org/mailman/listinfo/dhcp-users
_______________________________________________
dhcp-users mailing list
[hidden email]
https://lists.isc.org/mailman/listinfo/dhcp-users
Reply | Threaded
Open this post in threaded view
|

Re: ack fullfill database

Bill Shirley
I have you thought about using Simple Event Correlator (SEC)
http://simple-evcorr.sourceforge.net/SEC-tutorial/article.html ?
It monitors single/multiple log files and can react in a variety
of ways.  It does regexps and can call shell commands.

Fedora has an RPM.

I use it to send email when a IPSEC VPN is down but only if it
didn't come back up in 15 minutes.

Bill

On 12/3/2015 1:10 PM, Akey, Michael wrote:

> I can't speak to the proper way, but I can say we also have a perl script tailing our dhcpd log for ACKs and stuffing them into a MySQL database.  If you're losing ACKs it seems you might have some sort of throughput issue with regards to logging or your script.  We don't filter at all and our script has been running fine for 10+ years with tens of thousands of clients.
>
> If you did want to have your script only see ACKs, you could use syslog-ng and the message() filter to only find lines with DHCPACK and write those to a log file.  That's just one example, I'm sure other logging software can do similar.
>
> In any case, if there's a better way I'd love to hear about it.
>
> Mike Akey
> Information Services
> Oregon State University
> 541-737-4948
>
> ________________________________________
> From: [hidden email] [[hidden email]] on behalf of Leandro [[hidden email]]
> Sent: Tuesday, December 01, 2015 9:52 AM
> To: Users of ISC DHCP
> Subject: ack fullfill database
>
> Hi guys,
> I would like to know what is the propper way to get the las ack sended
> by dhcpd and update a plain text / database register ?
> Currently Im running a tail perl script on the dhcp log file and with a
> regular expression I take the ACKs.
> This method is ok for a littel amount of request, but it seems that
> after the 10k requests , some ACKs are not parsed.
> Is there for example a logging facility to take ONLY the ACKs ? It would
> be very nice.
>
> Regards.
> Leandro.
>
> _______________________________________________
> dhcp-users mailing list
> [hidden email]
> https://lists.isc.org/mailman/listinfo/dhcp-users
> _______________________________________________
> dhcp-users mailing list
> [hidden email]
> https://lists.isc.org/mailman/listinfo/dhcp-users
>
_______________________________________________
dhcp-users mailing list
[hidden email]
https://lists.isc.org/mailman/listinfo/dhcp-users