Netflow bot: use netflow_flows2 (TimescaleDB)

Author: grafolean

netflowbot.py

@@ -64,7 +64,7 @@ def _get_last_used_ts(job_id):
 
 def _get_current_max_ts():
     with get_db_cursor() as c:
-        c.execute(f"SELECT MAX(ts) FROM {DB_PREFIX}flows;")
+        c.execute(f"SELECT MAX(ts) FROM {DB_PREFIX}flows2;")
         rec = c.fetchone()
         if rec is None:
             return None
@@ -276,7 +276,7 @@ def get_traffic_for_entity(interval_label, last_used_ts, max_ts, time_between, d
                     f.{'input_snmp' if direction == DIRECTION_INGRESS else 'output_snmp'},
                     sum(f.in_bytes)
                 FROM
-                    {DB_PREFIX}flows "f"
+                    {DB_PREFIX}flows2 "f"
                 WHERE
                     f.client_ip = %s AND
                     f.ts > %s AND
@@ -322,7 +322,7 @@ def get_top_N_IPs_for_entity_interfaces(interval_label, last_used_ts, max_ts, ti
                 SELECT
                     distinct(f.{'input_snmp' if direction == DIRECTION_INGRESS else 'output_snmp'}) "interface_index"
                 FROM
-                    {DB_PREFIX}flows "f"
+                    {DB_PREFIX}flows2 "f"
                 WHERE
                     f.client_ip = %s AND
                     f.ts > %s AND
@@ -336,7 +336,7 @@ def get_top_N_IPs_for_entity_interfaces(interval_label, last_used_ts, max_ts, ti
                         f.{'ipvX_src_addr' if direction == DIRECTION_INGRESS else 'ipvX_dst_addr'},
                         sum(f.in_bytes) "traffic"
                     FROM
-                        {DB_PREFIX}flows "f"
+                        {DB_PREFIX}flows2 "f"
                     WHERE
                         f.client_ip = %s AND
                         f.ts > %s AND
@@ -370,7 +370,7 @@ def get_top_N_IPs_for_entity(interval_label, last_used_ts, max_ts, time_between,
                     f.{'ipvX_src_addr' if direction == DIRECTION_INGRESS else 'ipvX_dst_addr'},
                     sum(f.in_bytes) "traffic"
                 FROM
-                    {DB_PREFIX}flows "f"
+                    {DB_PREFIX}flows2 "f"
                 WHERE
                     f.client_ip = %s AND
                     f.ts > %s AND
@@ -404,7 +404,7 @@ def get_top_N_protocols_for_entity_interfaces(interval_label, last_used_ts, max_
                 SELECT
                     distinct(f.{'input_snmp' if direction == DIRECTION_INGRESS else 'output_snmp'}) "interface_index"
                 FROM
-                    {DB_PREFIX}flows "f"
+                    {DB_PREFIX}flows2 "f"
                 WHERE
                     f.client_ip = %s AND
                     f.ts > %s AND
@@ -418,7 +418,7 @@ def get_top_N_protocols_for_entity_interfaces(interval_label, last_used_ts, max_
                         f.protocol,
                         sum(f.in_bytes) "traffic"
                     FROM
-                        {DB_PREFIX}flows "f"
+                        {DB_PREFIX}flows2 "f"
                     WHERE
                         f.client_ip = %s AND
                         f.ts > %s AND
@@ -453,7 +453,7 @@ def get_top_N_protocols_for_entity(interval_label, last_used_ts, max_ts, time_be
                     f.protocol,
                     sum(f.in_bytes) "traffic"
                 FROM
-                    {DB_PREFIX}flows "f"
+                    {DB_PREFIX}flows2 "f"
                 WHERE
                     f.client_ip = %s AND
                     f.ts > %s AND
@@ -487,7 +487,7 @@ def get_top_N_connections_for_entity(interval_label, last_used_ts, max_ts, time_
                     f.ipvX_src_addr, f.ipvX_dst_addr,
                     sum(f.in_bytes) "traffic"
                 FROM
-                    {DB_PREFIX}flows "f"
+                    {DB_PREFIX}flows2 "f"
                 WHERE
                     f.client_ip = %s AND
                     f.ts > %s AND
@@ -520,7 +520,7 @@ def get_top_N_connections_for_entity(interval_label, last_used_ts, max_ts, time_
     #                 f.PROTOCOL,
     #                 sum(f.IN_BYTES) "traffic"
     #             FROM
-    #                 {DB_PREFIX}flows "f"
+    #                 {DB_PREFIX}flows2 "f"
     #             WHERE
     #                 f.ts >= %s AND
     #                 f.ts < %s AND