Re: [OPSAWG] discuss on draft-ietf-opsawg-syslog-msg-mib-06.txt

[Juergen Schoenwaelder <[e-mail]>]

On Fri, Aug 28, 2009 at 11:49:50PM +0200, Adrian Farrel wrote:
 
> Two minor points:
> 
> 1.
> > Do entries ever get removed from this table?
> Not as I understand it. The index is monotonic increasing and wraps at the 
> maximum value (defined as the lesser of syslogMsgTableMaxSize and 
> 4294967295).

No, it wraps at 4294967295 always. What makes you believe it maps at
min(syslogMsgTableMaxSize, 4294967295)?

> > Does rollover just overwrite starting at the beginning of the table?
> Yes.

Only in the case where the agent has storage for 4294967295 table
entries, something I consider unlikely implementations will support.

> Yes. And this is what swings it for me.
> I am just left wondering whether an Agent is more loaded by a bulk read of 
> 10,000 entries or maintaining a pointer into the table.
> 
> Clear up this last point, and I'm done.

If you only need the oldest entry in table insertion time, such an
index is of course handy. The question is what practical value it has
to be able to retrieve this oldest entry quickly.

/js

-- 
Juergen Schoenwaelder           Jacobs University Bremen gGmbH
Phone: [phone]         Campus Ring 1, 28759 Bremen, Germany
Fax:   [phone]         <http://www.jacobs-university.de/>