Re: [Cflowd] Output Bytes from Arts++

From: Mark Fullmer (maf@eng.oar.net)
Date: Mon Mar 31 2003 - 05:34:02 PST

  • Next message: Phil Lee: "RE: [Cflowd] Cflowd on Solaris 8"

    Depending on how the router is configued you will get the next hop AS or
    destination AS. Look at the 'sort' option to sort by bytes.

    mark

    On Mon, Mar 24, 2003 at 07:53:17AM -0500, patricia.kan@HydroOne.com wrote:
    > Thanks! Now that I know I can truncate the report, for example to 10
    > records, would this give me the top 10 AS routes (top meaning the largest
    > bytes)??
    >
    > -----Original Message-----
    > From: Mark Fullmer [mailto:maf@eng.oar.net]
    > Sent: Friday, March 21, 2003 6:46 PM
    > To: patricia.kan@HydroOne.com
    > Subject: Re: [Cflowd] Output Bytes from Arts++
    >
    >
    > You can do this with flow-tools. See the man page for flow-report.
    > http://www.splintered.net/sw/flow-tools
    >
    > On Fri, Mar 21, 2003 at 03:16:22PM -0500, patricia.kan@HydroOne.com wrote:
    > > Hi,
    > >
    > > Under the website:
    > > http://www.caida.org/tools/utilities/arts/arts++/artsplusplus-4.html, the
    > > sample output for "artsases" is:
    > >
    > > % artsases arts.19980817
    > > router: 192.172.226.1
    > > period: 08/17/1998 05:30:44 - 08/17/1998 05:37:42 EDT
    > > Src AS Dst AS Pkts Pkts/sec Bytes
    > Bits/sec
    > > ------ ------ ------------- ------------- -------------
    > -------------
    > > 195 195 70784 169.34 18301728
    > 350272
    > > 87 195 55445 132.644 12702754
    > 243115
    > > 3 195 53667 128.39 5130268
    > 98186.9
    > > 1224 195 8764 20.9665 4746527
    > 90842.6
    > > 3967 195 4514 10.799 3230531
    > 61828.3
    > > 7220 195 2073 4.95933 3066911
    > 58696.9
    > > 195 234 2151 5.14593 3056251
    > 58492.8
    > > 7050 195 3546 8.48325 2382911
    > 45606
    > > 33 195 3616 8.65072 2315453
    > 44314.9
    > > 297 195 1613 3.85885 2197017
    > 42048.2
    > > 194 195 10483 25.0789 2124627
    > 40662.7
    > > 7224 195 1674 4.00478 1979142
    > 37878.3
    > >
    > > Now, under the "Bytes" column, it appears to be descending. Does this AS
    > > matrix display the largest number of bytes down to the smallest? And if
    > so,
    > > is there any way to only display the top 10 AS routes (top meaning the
    > > largest bytes)?????
    > >
    > > Thanks for the help,
    > >
    > > Patricia
    > >
    > > _______________________________________________
    > > Cflowd mailing list
    > > Cflowd@caida.org
    > > http://login.caida.org/mailman/listinfo/cflowd
    >
    > _______________________________________________
    > Cflowd mailing list
    > Cflowd@caida.org
    > http://login.caida.org/mailman/listinfo/cflowd

    _______________________________________________
    Cflowd mailing list
    Cflowd@caida.org
    http://login.caida.org/mailman/listinfo/cflowd

    This archive was generated by hypermail 2.1.4 : Mon Mar 31 2003 - 05:40:35 PST