[Cflowd] Re: [flow-tools] netflow accounting

From: Derek Fage (lists account) (derek-lists@foreshore.net)
Date: Wed Nov 20 2002 - 13:38:36 PST

  • Next message: gab jones: "[Cflowd] netflow and ip accounting"

    Try flow-fanout.

    Derek...

    ---- Message from Edson Manners <emanners@realprod.acns.fsu.edu> at 13:09:36 2002-11-19 ------
    >I use a perl script that pipes flow-recieve to flow-print and then pipes the
    >output from flow-print as the input for the perl script. This script then
    >copies the srcip and the sum of octets into a hash for each unique ipaddress.
    >
    > At the end of every day(11:55pm) this script is stopped and the ipaddresses
    >along with the tally of octets used is written from the hash to a flat ascii
    >file.
    >
    > My problem is that I also have cflowd on the same box and I would like to
    >hear of opinions from people on the list of how to allow both cflowd and
    >flowtools to be able to use the netflow data exported from my router.
    >
    > I've read of using flow-split that does not seem to be what I need to solve
    >my problem, please correct me if I am wrong, I have also thought of saving
    >the flows and exporting them to cflowd format using flow-export but then I
    >cannot parse the data in realtime as my script is currently doing.
    >
    > I would really appreciate it if I could get views and opinions on what I
    >should do in this situation. Any thing is appreciated.
    >--
    >In a rare moment of mental clarity,
    >I realized that I was insane. - Edson Manners
    >Academic Computing and Network Systems
    >Florida State University
    >
    >_______________________________________________
    >flow-tools@splintered.net
    >http://www.splintered.net/sw/flow-tools
    >
    >________________________________________________________________________
    >This email has been scanned for all viruses by the MessageLabs SkyScan
    >service. For more information on a proactive anti-virus service working
    >around the clock, around the globe, visit http://www.messagelabs.com
    >________________________________________________________________________


    _______________________________________________
    Cflowd mailing list
    Cflowd@caida.org
    http://login.caida.org/mailman/listinfo/cflowd

    This archive was generated by hypermail 2.1.4 : Wed Nov 20 2002 - 13:56:29 PST