Re: [Cflowd] Question

From: Martin van den Nieuwelaar (martin@gadgets.co.nz)
Date: Tue Nov 26 2002 - 20:18:40 PST

  • Next message: Wanja Jansson: "[Cflowd] Aggregation utility, how does it work?"

    Systems Administrator wrote:
    > Hi all. I've looked around the Internet, but been unable to find an
    > answer to the following question:
    >
    > Does cflowd come with something which allows summary by IP address,
    > or is it necessary to get something like flow-tools as well for this?

    Yes it can do that, sort of. If you use artsnets it's possible to
    specify source and destination IP ranges as follows.

    # artsnets
    Usage: artsnets [-v] [-r] [-p] [-i ifIndexList] [-l maxEntries] [-s
    srcNet/mask] [-d dstNet/mask] file(s)

    The only problem is that the source and destination IP addresses of
    the packets are actually converted into network addresses (I suspect
    based on the netmask specified in the Netflow Export produced by the
    router). So you actually lose quite a lot of detail.

    Hope this helps answer your question.

    -Martin

    >
    > Thanks,
    >
    > Tim Nelson
    > Systems Administrator
    > Sunet Internet
    > Tel: +61 3 5241 1155
    > Fax: +61 3 5241 6187
    > Web: http://www.sunet.com.au/
    > Email: sysadmin@sunet.com.au <mailto:sysadmin@sunet.com.au> 

    -- 
Expert carrier network traffic analysis and visualisation
http://www.networkintelligence.biz
xenaphobia: The fear of being beaten to a
pulp by a leather-clad, New Zealand woman

    _______________________________________________
Cflowd mailing list
Cflowd@caida.org
http://login.caida.org/mailman/listinfo/cflowd

    This archive was generated by hypermail 2.1.4 : Tue Nov 26 2002 - 20:32:31 PST