Re: [Flow-tools] IPv6 Support

[Dave Ellingsberg]

What is this fixation with top talkers?  With most links at speeds of 100mb or 
better we should really be looking for the low and slow stalkers!  

Bigfoot.

>>> 
From:   'Ed Ravin' <era...@panix.com>
To:     Drew Weaver <drew.wea...@thenap.com>
Date:   10/28/10 8:55 AM
Subject:        Re: [Flow-tools] IPv6 Support

CC:     "flow-tools@list.splintered.net" <flow-tools@list.splintered.net>
On Thu, Oct 28, 2010 at 08:24:23AM - 0400, Drew Weaver wrote:

> So you can do stuff like this in nfdump?
> 
> ./flow- cat /var/netflow/ft/ft- v05.2010- 10* | ./flow- filter - Dnetwork | 
> ./flow- stat - f19 - S2 | more
> 
> To find a list of the top AS numbers sending you traffic?

More or less -  they support AS aggregation reports, assuming
you have AS data in the flow records, but you'd need to sort it
yourself afterwards.

_______________________________________________
Flow- tools mailing list
flow- to...@splintered.net
http://mailman.splintered.net/mailman/listinfo/flow- tools



_______________________________________________
Flow-tools mailing list
flow-to...@splintered.net
http://mailman.splintered.net/mailman/listinfo/flow-tools