Re: [Cflowd] summary information for a specific nexthop??

From: Mark Fullmer (maf@eng.oar.net)
Date: Fri Jul 05 2002 - 20:39:42 PDT

Next message: Mark Fullmer: "Re: [Cflowd] list of multiple cisco's"

Previous message: PER-LIM-Ortiz, Abraham: "[Cflowd] Cflowd error"
In reply to: Nikos Mouat: "[Cflowd] summary information for a specific nexthop??"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

flow-filter and flow-nfilter distributed with flow-tools-0.58 will allow
filtering on the next hop attribute. flow-nfilter will allow reports
to be filtered on any of the Cisco defined fields.

mark

On Wed, Jul 03, 2002 at 10:16:58AM -0700, Nikos Mouat wrote:
>
> Hello,
> I'd like to generate a port matrix for a specific nexthop value..
> What I'm trying to ultimately determine is the amount of KaZaA traffic for
> a particular nexthop and I have been able to generate an interface wide
> total for either a specific port, or a specific nexthop, but not both.
> Is there a way to do this, or am I S.O.L?
>
> Thanks!
> -nm
>
> ie:
> # artsagg -o -i 1 -s 6346 xx arts.20020702
> # artsnexthops xx
> router: a1.b1.c1.d1
> ifIndex: 1 (Serial6/0 a2.b2.c2.d2)
> period: 07/01/2002 16:58:07 - 07/02/2002 16:58:06 PDT
> NextHop Pkts Pkts/sec Bytes Bits/sec
> ------------- ------------- ------------- ------------- -------------
> [...]
> a3.b3.c3.d3 2007919 23 767692019 71083
> [...]
> # artsports xx
> router: a1.b1.c1.d1
> ifIndex: 1 (Serial6/0 a2.b2.c2.d2)
> period: 07/01/2002 16:58:07 - 07/02/2002 16:58:06 PDT
> selected ports: 6346
> Port InPkts InBytes OutPkts OutBytes
> ----- ------------- ------------- ------------- -------------
> 0 65889958 33893542527 141914 144660473
> 6346 1581071 787719944 1432004 619752116
>
> but I cannot get the amount of data for a3.b3.c3.d3 on port 6346.
>
> What I think I need to ultimately happen is to be able to drop all data
> except port 6346 rather than have it lumped into port 0.
>
> Is this possible???
>
>
> _______________________________________________
> Cflowd mailing list
> Cflowd@caida.org
> http://login.caida.org/mailman/listinfo/cflowd

_______________________________________________
Cflowd mailing list
Cflowd@caida.org
http://login.caida.org/mailman/listinfo/cflowd

Next message: Mark Fullmer: "Re: [Cflowd] list of multiple cisco's"
Previous message: PER-LIM-Ortiz, Abraham: "[Cflowd] Cflowd error"
In reply to: Nikos Mouat: "[Cflowd] summary information for a specific nexthop??"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Fri Jul 05 2002 - 20:49:19 PDT