Mysql join not working“Lost connection to MySQL server during query” errorfind and insert row to another...
If I can solve Sudoku, can I solve the Travelling Salesman Problem (TSP)? If so, how?
World War I as a war of liberals against authoritarians?
Are ETF trackers fundamentally better than individual stocks?
Aluminum electrolytic or ceramic capacitors for linear regulator input and output?
et qui - how do you really understand that kind of phraseology?
How can we have a quark condensate without a quark potential?
Recruiter wants very extensive technical details about all of my previous work
Non-trivial topology where only open sets are closed
Most cost effective thermostat setting: consistent temperature vs. lowest temperature possible
Why do passenger jet manufacturers design their planes with stall prevention systems?
Adventure Game (text based) in C++
Does .bashrc contain syntax errors?
Have the tides ever turned twice on any open problem?
Python if-else code style for reduced code for rounding floats
Why does a Star of David appear at a rally with Francisco Franco?
Is honey really a supersaturated solution? Does heating to un-crystalize redissolve it or melt it?
How could an airship be repaired midflight?
What is the relationship between relativity and the Doppler effect?
Examples of transfinite towers
Why Choose Less Effective Armour Types?
Brexit - No Deal Rejection
Simplify an interface for flexibly applying rules to periods of time
Does multi-classing into Fighter give you heavy armor proficiency?
Are all passive ability checks floors for active ability checks?
Mysql join not working
“Lost connection to MySQL server during query” errorfind and insert row to another table using mysql triggerIdentical query, tables, but different EXPLAIN and performanceMysql query not workingOptimizing a simple query on a large tableHow can I use MySQL variables in subqueries?MySQL query taking too longimprove mysql query in large tablesSlow SELECT examining whole tableselect MAX() from MySQL view (2x INNER JOIN) is slow
I have database with two tables: logs & src_info
mysql> describe logs;
+-----------+-------------+------+-----+---------+----------------+
| Field | Type | Null | Key | Default | Extra |
+-----------+-------------+------+-----+---------+----------------+
| id | int(11) | NO | PRI | NULL | auto_increment |
| sessionid | int(8) | NO | | NULL | |
| date | date | NO | | NULL | |
| time | time(6) | NO | | NULL | |
| src | varchar(15) | NO | | NULL | |
| dst | varchar(15) | NO | | NULL | |
| dstport | int(6) | NO | | NULL | |
| proto | varchar(6) | NO | | NULL | |
| rcvdbyte | int(24) | NO | | NULL | |
| sentbyte | int(24) | NO | | NULL | |
+-----------+-------------+------+-----+---------+----------------+
10 rows in set (0.00 sec)
AND:
mysql> describe src_ipinfo;
+----------+--------------+------+-----+---------+----------------+
| Field | Type | Null | Key | Default | Extra |
+----------+--------------+------+-----+---------+----------------+
| id | int(11) | NO | PRI | NULL | auto_increment |
| src | varchar(15) | NO | | NULL | |
| hostname | varchar(50) | NO | | NULL | |
| city | varchar(50) | NO | | NULL | |
| region | varchar(50) | NO | | NULL | |
| country | varchar(2) | NO | | NULL | |
| org | varchar(150) | NO | | NULL | |
+----------+--------------+------+-----+---------+----------------+
7 rows in set (0.00 sec)
I am trying to run queries extracting from both tables but when I do myslq just hangs and I get no error and no results: This are the queries that are causing problems:
mysql>SELECT logs.src, logs.dst, logs.dstport, src_ipinfo.country, COUNT(1) hits FROM logs, src_ipinfo WHERE logs.src = src_ipinfo.src GROUP BY logs.src, logs.dst, logs.dstport ORDER BY hits DESC;
mysql>SELECT * FROM logs a , src_ipinfo b WHERE a.src = b.src AND a.dstport= 60595 ORDER BY a.src, a.dst;
The ultimate goal is to search from logs where dstport = 'xxxxx' and the country != 'US' keeping count of how many times that source reached the same dst, dstport combination. Example output:
mysql> describe src_ipinfo;
+----------+--------------+---------+-------+---------+-------+
| src | dst | dstport | proto | country | hits |
+----------+--------------+---------+-------+---------+-------+
| 2.3.45.3 | 10.10.1.23 | 60531 | TCP | CN | 3452 |
| 1.2.45.3 | 10.10.1.23 | 80801 | TCP | NL | 37 |
| 4.5.45.3 | 10.10.1.23 | 443 | TCP | IN | 2 |
+----------+--------------+---------+-------+---------+-------+
I already have individual queries for counting src, dst combo:
mysql>SELECT src, dst, dstport, proto, COUNT(src) hits FROM `logs` WHERE dstport = '60595' GROUP BY src,dst ORDER BY hits DESC;
Now I need to add to that query the country information from src_ipinfo table and further manipulate the result so that I only get non US sources.
mysql join
asked Jan 28 '15 at 0:42
Rob DRob D
114
bumped to the homepage by Community♦ 2 mins ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
add a comment |
I have database with two tables: logs & src_info
mysql> describe logs;
+-----------+-------------+------+-----+---------+----------------+
| Field | Type | Null | Key | Default | Extra |
+-----------+-------------+------+-----+---------+----------------+
| id | int(11) | NO | PRI | NULL | auto_increment |
| sessionid | int(8) | NO | | NULL | |
| date | date | NO | | NULL | |
| time | time(6) | NO | | NULL | |
| src | varchar(15) | NO | | NULL | |
| dst | varchar(15) | NO | | NULL | |
| dstport | int(6) | NO | | NULL | |
| proto | varchar(6) | NO | | NULL | |
| rcvdbyte | int(24) | NO | | NULL | |
| sentbyte | int(24) | NO | | NULL | |
+-----------+-------------+------+-----+---------+----------------+
10 rows in set (0.00 sec)
AND:
mysql> describe src_ipinfo;
+----------+--------------+------+-----+---------+----------------+
| Field | Type | Null | Key | Default | Extra |
+----------+--------------+------+-----+---------+----------------+
| id | int(11) | NO | PRI | NULL | auto_increment |
| src | varchar(15) | NO | | NULL | |
| hostname | varchar(50) | NO | | NULL | |
| city | varchar(50) | NO | | NULL | |
| region | varchar(50) | NO | | NULL | |
| country | varchar(2) | NO | | NULL | |
| org | varchar(150) | NO | | NULL | |
+----------+--------------+------+-----+---------+----------------+
7 rows in set (0.00 sec)
I am trying to run queries extracting from both tables but when I do myslq just hangs and I get no error and no results: This are the queries that are causing problems:
mysql>SELECT logs.src, logs.dst, logs.dstport, src_ipinfo.country, COUNT(1) hits FROM logs, src_ipinfo WHERE logs.src = src_ipinfo.src GROUP BY logs.src, logs.dst, logs.dstport ORDER BY hits DESC;
mysql>SELECT * FROM logs a , src_ipinfo b WHERE a.src = b.src AND a.dstport= 60595 ORDER BY a.src, a.dst;
The ultimate goal is to search from logs where dstport = 'xxxxx' and the country != 'US' keeping count of how many times that source reached the same dst, dstport combination. Example output:
mysql> describe src_ipinfo;
+----------+--------------+---------+-------+---------+-------+
| src | dst | dstport | proto | country | hits |
+----------+--------------+---------+-------+---------+-------+
| 2.3.45.3 | 10.10.1.23 | 60531 | TCP | CN | 3452 |
| 1.2.45.3 | 10.10.1.23 | 80801 | TCP | NL | 37 |
| 4.5.45.3 | 10.10.1.23 | 443 | TCP | IN | 2 |
+----------+--------------+---------+-------+---------+-------+
I already have individual queries for counting src, dst combo:
mysql>SELECT src, dst, dstport, proto, COUNT(src) hits FROM `logs` WHERE dstport = '60595' GROUP BY src,dst ORDER BY hits DESC;
Now I need to add to that query the country information from src_ipinfo table and further manipulate the result so that I only get non US sources.
mysql join
asked Jan 28 '15 at 0:42
Rob DRob D
114
bumped to the homepage by Community♦ 2 mins ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
add a comment |
I have database with two tables: logs & src_info
mysql> describe logs;
+-----------+-------------+------+-----+---------+----------------+
| Field | Type | Null | Key | Default | Extra |
+-----------+-------------+------+-----+---------+----------------+
| id | int(11) | NO | PRI | NULL | auto_increment |
| sessionid | int(8) | NO | | NULL | |
| date | date | NO | | NULL | |
| time | time(6) | NO | | NULL | |
| src | varchar(15) | NO | | NULL | |
| dst | varchar(15) | NO | | NULL | |
| dstport | int(6) | NO | | NULL | |
| proto | varchar(6) | NO | | NULL | |
| rcvdbyte | int(24) | NO | | NULL | |
| sentbyte | int(24) | NO | | NULL | |
+-----------+-------------+------+-----+---------+----------------+
10 rows in set (0.00 sec)
AND:
mysql> describe src_ipinfo;
+----------+--------------+------+-----+---------+----------------+
| Field | Type | Null | Key | Default | Extra |
+----------+--------------+------+-----+---------+----------------+
| id | int(11) | NO | PRI | NULL | auto_increment |
| src | varchar(15) | NO | | NULL | |
| hostname | varchar(50) | NO | | NULL | |
| city | varchar(50) | NO | | NULL | |
| region | varchar(50) | NO | | NULL | |
| country | varchar(2) | NO | | NULL | |
| org | varchar(150) | NO | | NULL | |
+----------+--------------+------+-----+---------+----------------+
7 rows in set (0.00 sec)
I am trying to run queries extracting from both tables but when I do myslq just hangs and I get no error and no results: This are the queries that are causing problems:
mysql>SELECT logs.src, logs.dst, logs.dstport, src_ipinfo.country, COUNT(1) hits FROM logs, src_ipinfo WHERE logs.src = src_ipinfo.src GROUP BY logs.src, logs.dst, logs.dstport ORDER BY hits DESC;
mysql>SELECT * FROM logs a , src_ipinfo b WHERE a.src = b.src AND a.dstport= 60595 ORDER BY a.src, a.dst;
The ultimate goal is to search from logs where dstport = 'xxxxx' and the country != 'US' keeping count of how many times that source reached the same dst, dstport combination. Example output:
mysql> describe src_ipinfo;
+----------+--------------+---------+-------+---------+-------+
| src | dst | dstport | proto | country | hits |
+----------+--------------+---------+-------+---------+-------+
| 2.3.45.3 | 10.10.1.23 | 60531 | TCP | CN | 3452 |
| 1.2.45.3 | 10.10.1.23 | 80801 | TCP | NL | 37 |
| 4.5.45.3 | 10.10.1.23 | 443 | TCP | IN | 2 |
+----------+--------------+---------+-------+---------+-------+
I already have individual queries for counting src, dst combo:
mysql>SELECT src, dst, dstport, proto, COUNT(src) hits FROM `logs` WHERE dstport = '60595' GROUP BY src,dst ORDER BY hits DESC;
Now I need to add to that query the country information from src_ipinfo table and further manipulate the result so that I only get non US sources.
mysql join
asked Jan 28 '15 at 0:42
Rob DRob D
114
I have database with two tables: logs & src_info
mysql> describe logs;
+-----------+-------------+------+-----+---------+----------------+
| Field | Type | Null | Key | Default | Extra |
+-----------+-------------+------+-----+---------+----------------+
| id | int(11) | NO | PRI | NULL | auto_increment |
| sessionid | int(8) | NO | | NULL | |
| date | date | NO | | NULL | |
| time | time(6) | NO | | NULL | |
| src | varchar(15) | NO | | NULL | |
| dst | varchar(15) | NO | | NULL | |
| dstport | int(6) | NO | | NULL | |
| proto | varchar(6) | NO | | NULL | |
| rcvdbyte | int(24) | NO | | NULL | |
| sentbyte | int(24) | NO | | NULL | |
+-----------+-------------+------+-----+---------+----------------+
10 rows in set (0.00 sec)
AND:
mysql> describe src_ipinfo;
+----------+--------------+------+-----+---------+----------------+
| Field | Type | Null | Key | Default | Extra |
+----------+--------------+------+-----+---------+----------------+
| id | int(11) | NO | PRI | NULL | auto_increment |
| src | varchar(15) | NO | | NULL | |
| hostname | varchar(50) | NO | | NULL | |
| city | varchar(50) | NO | | NULL | |
| region | varchar(50) | NO | | NULL | |
| country | varchar(2) | NO | | NULL | |
| org | varchar(150) | NO | | NULL | |
+----------+--------------+------+-----+---------+----------------+
7 rows in set (0.00 sec)
I am trying to run queries extracting from both tables but when I do myslq just hangs and I get no error and no results: This are the queries that are causing problems:
mysql>SELECT logs.src, logs.dst, logs.dstport, src_ipinfo.country, COUNT(1) hits FROM logs, src_ipinfo WHERE logs.src = src_ipinfo.src GROUP BY logs.src, logs.dst, logs.dstport ORDER BY hits DESC;
mysql>SELECT * FROM logs a , src_ipinfo b WHERE a.src = b.src AND a.dstport= 60595 ORDER BY a.src, a.dst;
The ultimate goal is to search from logs where dstport = 'xxxxx' and the country != 'US' keeping count of how many times that source reached the same dst, dstport combination. Example output:
mysql> describe src_ipinfo;
+----------+--------------+---------+-------+---------+-------+
| src | dst | dstport | proto | country | hits |
+----------+--------------+---------+-------+---------+-------+
| 2.3.45.3 | 10.10.1.23 | 60531 | TCP | CN | 3452 |
| 1.2.45.3 | 10.10.1.23 | 80801 | TCP | NL | 37 |
| 4.5.45.3 | 10.10.1.23 | 443 | TCP | IN | 2 |
+----------+--------------+---------+-------+---------+-------+
I already have individual queries for counting src, dst combo:
mysql>SELECT src, dst, dstport, proto, COUNT(src) hits FROM `logs` WHERE dstport = '60595' GROUP BY src,dst ORDER BY hits DESC;
Now I need to add to that query the country information from src_ipinfo table and further manipulate the result so that I only get non US sources.
mysql join
mysql join
asked Jan 28 '15 at 0:42
Rob DRob D
114
asked Jan 28 '15 at 0:42
Rob DRob D
114
asked Jan 28 '15 at 0:42
Rob DRob D
114
asked Jan 28 '15 at 0:42
Rob DRob D
114
asked Jan 28 '15 at 0:42
Rob DRob D
114
114
bumped to the homepage by Community♦ 2 mins ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
bumped to the homepage by Community♦ 2 mins ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
add a comment |
add a comment |
2 Answers
2
active
oldest
votes
Not sure what was happening in the past with my queries but this query worked:
SELECT date,time,logs.src,src_ipinfo.country, dst,proto,sentbyte,rcvdbyte, COUNT(logs.src) hits FROM `logs`, src_ipinfo WHERE dstport = '60595' AND logs.src = src_ipinfo.src GROUP BY logs.src, logs.dst ORDER BY hits DESC;
And the result was:
mysql> SELECT date,time,logs.src,src_ipinfo.country, dst,proto,sentbyte,rcvdbyte, COUNT(logs.src) hits FROM `logs`, src_ipinfo WHERE dstport = '60595' AND logs.src = src_ipinfo.src GROUP BY logs.src, logs.dst ORDER BY hits DESC;
+------------+-----------------+-----------------+---------+----------------+-------+----------+----------+------+
| date | time | src | country | dst | proto | sentbyte | rcvdbyte | hits |
+------------+-----------------+-----------------+---------+----------------+-------+----------+----------+------+
| 2014-12-29 | 05:41:04.000000 | XXX.XXX.165.3 | NL | XXX.XXX.20.48 | UDP | 0 | 0 | 2314 |
| 2014-12-29 | 05:41:04.000000 | XXX.XXX.165.3 | NL | XXX.XXX.11.131 | UDP | 0 | 0 | 2301 |
| 2014-12-29 | 08:49:09.000000 | XXX.XXX.85.9 | DZ | XXX.XXX.20.48 | UDP | 0 | 0 | 1401 |
| 2014-12-29 | 05:56:44.000000 | XXX.XXX.85.9 | DZ | XXX.XXX.11.131 | TCP | 0 | 0 | 1390 |
| 2014-12-29 | 09:02:23.000000 | XXX.XXX.246.99 | CN | XXX.XXX.20.48 | UDP | 0 | 0 | 937 |
| 2014-12-29 | 09:02:22.000000 | XXX.XXX.246.99 | CN | XXX.XXX.11.131 | UDP | 0 | 0 | 891 |
| 2014-12-29 | 05:45:34.000000 | XXX.XXX.36.164 | BN | XXX.XXX.20.48 | UDP | 0 | 0 | 769 |
| 2014-12-29 | 05:45:34.000000 | XXX.XXX.36.164 | BN | XXX.XXX.11.131 | UDP | 0 | 0 | 754 |
| 2014-12-29 | 05:36:31.000000 | XXX.XXX.8.218 | CA | XXX.XXX.11.131 | UDP | 0 | 0 | 461 |
| 2014-12-29 | 05:36:51.000000 | XXX.XXX.13.21 | CA | XXX.XXX.20.48 | UDP | 4168 | 201908 | 403 |
+------------+-----------------+-----------------+---------+----------------+-------+----------+----------+------+
Now I will play with GROUP BY to aggregate countries
answered Jan 28 '15 at 19:44
Rob DRob D
114
add a comment |
Those sound like huge tables, are they? If so, you may need some form of Summary Table to gather subtotals each day (or hour), then use another query to generate the 'report' from that table.
PLEASE use SHOW CREATE TABLE; it is more descriptive than DESCRIBE.
WHERE logs.src = src_ipinfo.src
Without any indexes on those fields, the query will take a loooong time.
WHERE a.src = b.src AND a.dstport= 60595
FROM `logs` WHERE dstport = '60595'
Also, logs needs INDEX(dstport)
answered Jan 30 '15 at 5:26
Rick JamesRick James
43.5k22259
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "182"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fdba.stackexchange.com%2fquestions%2f90352%2fmysql-join-not-working%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
2 Answers
2
active
oldest
votes
2 Answers
2
active
oldest
votes
active
oldest
votes
active
oldest
votes
Not sure what was happening in the past with my queries but this query worked:
SELECT date,time,logs.src,src_ipinfo.country, dst,proto,sentbyte,rcvdbyte, COUNT(logs.src) hits FROM `logs`, src_ipinfo WHERE dstport = '60595' AND logs.src = src_ipinfo.src GROUP BY logs.src, logs.dst ORDER BY hits DESC;
And the result was:
mysql> SELECT date,time,logs.src,src_ipinfo.country, dst,proto,sentbyte,rcvdbyte, COUNT(logs.src) hits FROM `logs`, src_ipinfo WHERE dstport = '60595' AND logs.src = src_ipinfo.src GROUP BY logs.src, logs.dst ORDER BY hits DESC;
+------------+-----------------+-----------------+---------+----------------+-------+----------+----------+------+
| date | time | src | country | dst | proto | sentbyte | rcvdbyte | hits |
+------------+-----------------+-----------------+---------+----------------+-------+----------+----------+------+
| 2014-12-29 | 05:41:04.000000 | XXX.XXX.165.3 | NL | XXX.XXX.20.48 | UDP | 0 | 0 | 2314 |
| 2014-12-29 | 05:41:04.000000 | XXX.XXX.165.3 | NL | XXX.XXX.11.131 | UDP | 0 | 0 | 2301 |
| 2014-12-29 | 08:49:09.000000 | XXX.XXX.85.9 | DZ | XXX.XXX.20.48 | UDP | 0 | 0 | 1401 |
| 2014-12-29 | 05:56:44.000000 | XXX.XXX.85.9 | DZ | XXX.XXX.11.131 | TCP | 0 | 0 | 1390 |
| 2014-12-29 | 09:02:23.000000 | XXX.XXX.246.99 | CN | XXX.XXX.20.48 | UDP | 0 | 0 | 937 |
| 2014-12-29 | 09:02:22.000000 | XXX.XXX.246.99 | CN | XXX.XXX.11.131 | UDP | 0 | 0 | 891 |
| 2014-12-29 | 05:45:34.000000 | XXX.XXX.36.164 | BN | XXX.XXX.20.48 | UDP | 0 | 0 | 769 |
| 2014-12-29 | 05:45:34.000000 | XXX.XXX.36.164 | BN | XXX.XXX.11.131 | UDP | 0 | 0 | 754 |
| 2014-12-29 | 05:36:31.000000 | XXX.XXX.8.218 | CA | XXX.XXX.11.131 | UDP | 0 | 0 | 461 |
| 2014-12-29 | 05:36:51.000000 | XXX.XXX.13.21 | CA | XXX.XXX.20.48 | UDP | 4168 | 201908 | 403 |
+------------+-----------------+-----------------+---------+----------------+-------+----------+----------+------+
Now I will play with GROUP BY to aggregate countries
answered Jan 28 '15 at 19:44
Rob DRob D
114
add a comment |
Not sure what was happening in the past with my queries but this query worked:
SELECT date,time,logs.src,src_ipinfo.country, dst,proto,sentbyte,rcvdbyte, COUNT(logs.src) hits FROM `logs`, src_ipinfo WHERE dstport = '60595' AND logs.src = src_ipinfo.src GROUP BY logs.src, logs.dst ORDER BY hits DESC;
And the result was:
mysql> SELECT date,time,logs.src,src_ipinfo.country, dst,proto,sentbyte,rcvdbyte, COUNT(logs.src) hits FROM `logs`, src_ipinfo WHERE dstport = '60595' AND logs.src = src_ipinfo.src GROUP BY logs.src, logs.dst ORDER BY hits DESC;
+------------+-----------------+-----------------+---------+----------------+-------+----------+----------+------+
| date | time | src | country | dst | proto | sentbyte | rcvdbyte | hits |
+------------+-----------------+-----------------+---------+----------------+-------+----------+----------+------+
| 2014-12-29 | 05:41:04.000000 | XXX.XXX.165.3 | NL | XXX.XXX.20.48 | UDP | 0 | 0 | 2314 |
| 2014-12-29 | 05:41:04.000000 | XXX.XXX.165.3 | NL | XXX.XXX.11.131 | UDP | 0 | 0 | 2301 |
| 2014-12-29 | 08:49:09.000000 | XXX.XXX.85.9 | DZ | XXX.XXX.20.48 | UDP | 0 | 0 | 1401 |
| 2014-12-29 | 05:56:44.000000 | XXX.XXX.85.9 | DZ | XXX.XXX.11.131 | TCP | 0 | 0 | 1390 |
| 2014-12-29 | 09:02:23.000000 | XXX.XXX.246.99 | CN | XXX.XXX.20.48 | UDP | 0 | 0 | 937 |
| 2014-12-29 | 09:02:22.000000 | XXX.XXX.246.99 | CN | XXX.XXX.11.131 | UDP | 0 | 0 | 891 |
| 2014-12-29 | 05:45:34.000000 | XXX.XXX.36.164 | BN | XXX.XXX.20.48 | UDP | 0 | 0 | 769 |
| 2014-12-29 | 05:45:34.000000 | XXX.XXX.36.164 | BN | XXX.XXX.11.131 | UDP | 0 | 0 | 754 |
| 2014-12-29 | 05:36:31.000000 | XXX.XXX.8.218 | CA | XXX.XXX.11.131 | UDP | 0 | 0 | 461 |
| 2014-12-29 | 05:36:51.000000 | XXX.XXX.13.21 | CA | XXX.XXX.20.48 | UDP | 4168 | 201908 | 403 |
+------------+-----------------+-----------------+---------+----------------+-------+----------+----------+------+
Now I will play with GROUP BY to aggregate countries
answered Jan 28 '15 at 19:44
Rob DRob D
114
add a comment |
Not sure what was happening in the past with my queries but this query worked:
SELECT date,time,logs.src,src_ipinfo.country, dst,proto,sentbyte,rcvdbyte, COUNT(logs.src) hits FROM `logs`, src_ipinfo WHERE dstport = '60595' AND logs.src = src_ipinfo.src GROUP BY logs.src, logs.dst ORDER BY hits DESC;
And the result was:
mysql> SELECT date,time,logs.src,src_ipinfo.country, dst,proto,sentbyte,rcvdbyte, COUNT(logs.src) hits FROM `logs`, src_ipinfo WHERE dstport = '60595' AND logs.src = src_ipinfo.src GROUP BY logs.src, logs.dst ORDER BY hits DESC;
+------------+-----------------+-----------------+---------+----------------+-------+----------+----------+------+
| date | time | src | country | dst | proto | sentbyte | rcvdbyte | hits |
+------------+-----------------+-----------------+---------+----------------+-------+----------+----------+------+
| 2014-12-29 | 05:41:04.000000 | XXX.XXX.165.3 | NL | XXX.XXX.20.48 | UDP | 0 | 0 | 2314 |
| 2014-12-29 | 05:41:04.000000 | XXX.XXX.165.3 | NL | XXX.XXX.11.131 | UDP | 0 | 0 | 2301 |
| 2014-12-29 | 08:49:09.000000 | XXX.XXX.85.9 | DZ | XXX.XXX.20.48 | UDP | 0 | 0 | 1401 |
| 2014-12-29 | 05:56:44.000000 | XXX.XXX.85.9 | DZ | XXX.XXX.11.131 | TCP | 0 | 0 | 1390 |
| 2014-12-29 | 09:02:23.000000 | XXX.XXX.246.99 | CN | XXX.XXX.20.48 | UDP | 0 | 0 | 937 |
| 2014-12-29 | 09:02:22.000000 | XXX.XXX.246.99 | CN | XXX.XXX.11.131 | UDP | 0 | 0 | 891 |
| 2014-12-29 | 05:45:34.000000 | XXX.XXX.36.164 | BN | XXX.XXX.20.48 | UDP | 0 | 0 | 769 |
| 2014-12-29 | 05:45:34.000000 | XXX.XXX.36.164 | BN | XXX.XXX.11.131 | UDP | 0 | 0 | 754 |
| 2014-12-29 | 05:36:31.000000 | XXX.XXX.8.218 | CA | XXX.XXX.11.131 | UDP | 0 | 0 | 461 |
| 2014-12-29 | 05:36:51.000000 | XXX.XXX.13.21 | CA | XXX.XXX.20.48 | UDP | 4168 | 201908 | 403 |
+------------+-----------------+-----------------+---------+----------------+-------+----------+----------+------+
Now I will play with GROUP BY to aggregate countries
answered Jan 28 '15 at 19:44
Rob DRob D
114
Not sure what was happening in the past with my queries but this query worked:
SELECT date,time,logs.src,src_ipinfo.country, dst,proto,sentbyte,rcvdbyte, COUNT(logs.src) hits FROM `logs`, src_ipinfo WHERE dstport = '60595' AND logs.src = src_ipinfo.src GROUP BY logs.src, logs.dst ORDER BY hits DESC;
And the result was:
mysql> SELECT date,time,logs.src,src_ipinfo.country, dst,proto,sentbyte,rcvdbyte, COUNT(logs.src) hits FROM `logs`, src_ipinfo WHERE dstport = '60595' AND logs.src = src_ipinfo.src GROUP BY logs.src, logs.dst ORDER BY hits DESC;
+------------+-----------------+-----------------+---------+----------------+-------+----------+----------+------+
| date | time | src | country | dst | proto | sentbyte | rcvdbyte | hits |
+------------+-----------------+-----------------+---------+----------------+-------+----------+----------+------+
| 2014-12-29 | 05:41:04.000000 | XXX.XXX.165.3 | NL | XXX.XXX.20.48 | UDP | 0 | 0 | 2314 |
| 2014-12-29 | 05:41:04.000000 | XXX.XXX.165.3 | NL | XXX.XXX.11.131 | UDP | 0 | 0 | 2301 |
| 2014-12-29 | 08:49:09.000000 | XXX.XXX.85.9 | DZ | XXX.XXX.20.48 | UDP | 0 | 0 | 1401 |
| 2014-12-29 | 05:56:44.000000 | XXX.XXX.85.9 | DZ | XXX.XXX.11.131 | TCP | 0 | 0 | 1390 |
| 2014-12-29 | 09:02:23.000000 | XXX.XXX.246.99 | CN | XXX.XXX.20.48 | UDP | 0 | 0 | 937 |
| 2014-12-29 | 09:02:22.000000 | XXX.XXX.246.99 | CN | XXX.XXX.11.131 | UDP | 0 | 0 | 891 |
| 2014-12-29 | 05:45:34.000000 | XXX.XXX.36.164 | BN | XXX.XXX.20.48 | UDP | 0 | 0 | 769 |
| 2014-12-29 | 05:45:34.000000 | XXX.XXX.36.164 | BN | XXX.XXX.11.131 | UDP | 0 | 0 | 754 |
| 2014-12-29 | 05:36:31.000000 | XXX.XXX.8.218 | CA | XXX.XXX.11.131 | UDP | 0 | 0 | 461 |
| 2014-12-29 | 05:36:51.000000 | XXX.XXX.13.21 | CA | XXX.XXX.20.48 | UDP | 4168 | 201908 | 403 |
+------------+-----------------+-----------------+---------+----------------+-------+----------+----------+------+
Now I will play with GROUP BY to aggregate countries
answered Jan 28 '15 at 19:44
Rob DRob D
114
answered Jan 28 '15 at 19:44
Rob DRob D
114
answered Jan 28 '15 at 19:44
Rob DRob D
114
answered Jan 28 '15 at 19:44
Rob DRob D
114
114
add a comment |
add a comment |
Those sound like huge tables, are they? If so, you may need some form of Summary Table to gather subtotals each day (or hour), then use another query to generate the 'report' from that table.
PLEASE use SHOW CREATE TABLE; it is more descriptive than DESCRIBE.
WHERE logs.src = src_ipinfo.src
Without any indexes on those fields, the query will take a loooong time.
WHERE a.src = b.src AND a.dstport= 60595
FROM `logs` WHERE dstport = '60595'
Also, logs needs INDEX(dstport)
answered Jan 30 '15 at 5:26
Rick JamesRick James
43.5k22259
add a comment |
Those sound like huge tables, are they? If so, you may need some form of Summary Table to gather subtotals each day (or hour), then use another query to generate the 'report' from that table.
PLEASE use SHOW CREATE TABLE; it is more descriptive than DESCRIBE.
WHERE logs.src = src_ipinfo.src
Without any indexes on those fields, the query will take a loooong time.
WHERE a.src = b.src AND a.dstport= 60595
FROM `logs` WHERE dstport = '60595'
Also, logs needs INDEX(dstport)
answered Jan 30 '15 at 5:26
Rick JamesRick James
43.5k22259
add a comment |
Those sound like huge tables, are they? If so, you may need some form of Summary Table to gather subtotals each day (or hour), then use another query to generate the 'report' from that table.
PLEASE use SHOW CREATE TABLE; it is more descriptive than DESCRIBE.
WHERE logs.src = src_ipinfo.src
Without any indexes on those fields, the query will take a loooong time.
WHERE a.src = b.src AND a.dstport= 60595
FROM `logs` WHERE dstport = '60595'
Also, logs needs INDEX(dstport)
answered Jan 30 '15 at 5:26
Rick JamesRick James
43.5k22259
Those sound like huge tables, are they? If so, you may need some form of Summary Table to gather subtotals each day (or hour), then use another query to generate the 'report' from that table.
PLEASE use SHOW CREATE TABLE; it is more descriptive than DESCRIBE.
WHERE logs.src = src_ipinfo.src
Without any indexes on those fields, the query will take a loooong time.
WHERE a.src = b.src AND a.dstport= 60595
FROM `logs` WHERE dstport = '60595'
Also, logs needs INDEX(dstport)
answered Jan 30 '15 at 5:26
Rick JamesRick James
43.5k22259
answered Jan 30 '15 at 5:26
Rick JamesRick James
43.5k22259
answered Jan 30 '15 at 5:26
Rick JamesRick James
43.5k22259
answered Jan 30 '15 at 5:26
Rick JamesRick James
43.5k22259
43.5k22259
add a comment |
add a comment |
Thanks for contributing an answer to Database Administrators Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fdba.stackexchange.com%2fquestions%2f90352%2fmysql-join-not-working%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
