Re: [Cflowd] summary information for a specific nexthop??

From: Mark Fullmer (maf@eng.oar.net)
Date: Fri Jul 05 2002 - 20:39:42 PDT

  • Next message: Mark Fullmer: "Re: [Cflowd] list of multiple cisco's"

    flow-filter and flow-nfilter distributed with flow-tools-0.58 will allow
    filtering on the next hop attribute. flow-nfilter will allow reports
    to be filtered on any of the Cisco defined fields.

    mark

    On Wed, Jul 03, 2002 at 10:16:58AM -0700, Nikos Mouat wrote:
    >
    > Hello,
    > I'd like to generate a port matrix for a specific nexthop value..
    > What I'm trying to ultimately determine is the amount of KaZaA traffic for
    > a particular nexthop and I have been able to generate an interface wide
    > total for either a specific port, or a specific nexthop, but not both.
    > Is there a way to do this, or am I S.O.L?
    >
    > Thanks!
    > -nm
    >
    > ie:
    > # artsagg -o -i 1 -s 6346 xx arts.20020702
    > # artsnexthops xx
    > router: a1.b1.c1.d1
    > ifIndex: 1 (Serial6/0 a2.b2.c2.d2)
    > period: 07/01/2002 16:58:07 - 07/02/2002 16:58:06 PDT
    > NextHop Pkts Pkts/sec Bytes Bits/sec
    > ------------- ------------- ------------- ------------- -------------
    > [...]
    > a3.b3.c3.d3 2007919 23 767692019 71083
    > [...]
    > # artsports xx
    > router: a1.b1.c1.d1
    > ifIndex: 1 (Serial6/0 a2.b2.c2.d2)
    > period: 07/01/2002 16:58:07 - 07/02/2002 16:58:06 PDT
    > selected ports: 6346
    > Port InPkts InBytes OutPkts OutBytes
    > ----- ------------- ------------- ------------- -------------
    > 0 65889958 33893542527 141914 144660473
    > 6346 1581071 787719944 1432004 619752116
    >
    > but I cannot get the amount of data for a3.b3.c3.d3 on port 6346.
    >
    > What I think I need to ultimately happen is to be able to drop all data
    > except port 6346 rather than have it lumped into port 0.
    >
    > Is this possible???
    >
    >
    > _______________________________________________
    > Cflowd mailing list
    > Cflowd@caida.org
    > http://login.caida.org/mailman/listinfo/cflowd

    _______________________________________________
    Cflowd mailing list
    Cflowd@caida.org
    http://login.caida.org/mailman/listinfo/cflowd



    This archive was generated by hypermail 2.1.4 : Fri Jul 05 2002 - 20:49:19 PDT