Show an example of exception file format and heavy load on SD card. about angryoxide HOT 5 CLOSED

from angryoxide.

Target / Whitelist file examples:

aabbccddeeff # Lowercase without delimiter
aa:bb:cc:dd:ee:ff # Lowercase with ":"
aa-bb-cc-dd-ee-ff # Lowercase with "-"
AABBCCDDEEFF # Capitals without delimiter 
AA:BB:CC:DD:EE:FF # Capitals with ":"
AA-BB-CC-DD-EE-FF # Capitals with "-"
aAbbcCddEeFf # Mixed Case
TestSSID # without spaces
Test SSID # with spaces

from angryoxide.

Let me clarify that the pcapng file and the sqlite database are different. The pcapng file writes every frame to disk only once.

The sqlite database is using the rollback journal as a part of it's standard operation, I am unable to (without writing my own sqlite library) choose where that journal file goes. There are PRAGMA options such as storing the journal in volatile memory, but those come with the side effect of potentially corrupting the database in the case of a crash or sudden loss of power (as opposed to just corrupting the data in the journal).

If my math (supplemented with some GPT help) here is correct, I would prefer maintain the reliability of the data considering 1.45MiB/s on a 50,000 cycle SD card of 32GB will still live like 35 years.

Regardless, I can add the option in the next full version of AO to force the journal into RAM, but it won't be the default behavior.

from angryoxide.

As for the journal file, it’s the SQLite rollback journal and is used for atomic writes on the database. The reason I’m not batch writing is because the current version of the engine is nearly synchronous and handles frames that way from start to finish. The AO rewrite will use batched inserts to reduce the amount of writes and improve performance anyway, so reducing writes will be a side effect.

In that case, couldn't the creation of the *.pcap-ng.kismet-journal file be redirected to tmpfs? Or at least add a parameter for AngryOxide to allow the user to specify the location of the journal file? I think it would help to reduce the load on the SD card.

from angryoxide.

Regardless, I can add the option in the next full version of AO to force the journal into RAM, but it won't be the default behavior.

Thank you for your responsiveness. My concern about the wear and tear of the SD card is not from scratch. I once had a sad experience when the microSD failed due to the fact that it had SWAP memory on it. After that, I try to eliminate the options when the operating system and SWAP are on the same physical drive.

from angryoxide.