From: Martin van den Nieuwelaar (email@example.com)
Date: Tue Nov 26 2002 - 20:18:40 PST
Systems Administrator wrote:
> Hi all. I've looked around the Internet, but been unable to find an
> answer to the following question:
> Does cflowd come with something which allows summary by IP address,
> or is it necessary to get something like flow-tools as well for this?
Yes it can do that, sort of. If you use artsnets it's possible to
specify source and destination IP ranges as follows.
Usage: artsnets [-v] [-r] [-p] [-i ifIndexList] [-l maxEntries] [-s
srcNet/mask] [-d dstNet/mask] file(s)
The only problem is that the source and destination IP addresses of
the packets are actually converted into network addresses (I suspect
based on the netmask specified in the Netflow Export produced by the
router). So you actually lose quite a lot of detail.
Hope this helps answer your question.
> Tim Nelson
> Systems Administrator
> Sunet Internet
> Tel: +61 3 5241 1155
> Fax: +61 3 5241 6187
> Web: http://www.sunet.com.au/
> Email: firstname.lastname@example.org <mailto:email@example.com>
-- Expert carrier network traffic analysis and visualisation http://www.networkintelligence.biz xenaphobia: The fear of being beaten to a pulp by a leather-clad, New Zealand woman
_______________________________________________ Cflowd mailing list Cflowd@caida.org http://login.caida.org/mailman/listinfo/cflowd
This archive was generated by hypermail 2.1.4 : Tue Nov 26 2002 - 20:32:31 PST