On Thu, Oct 16, 2008 at 10:55:29AM +0000, Borg Tinderne wrote: > Raw netflow is a box centric view of network traffic,????the few netflow > display products I have played with over the last decade or so continue > with this box-centric view , can't comment on nfsen.???? As interesting > as a box-centric view is,?? I generally find I want a network-centric > view of network traffic,?? so post processing of flow data with something > ,??for me this has been RYO, so??choose your own poison ( perl / sql / > tcl??/ awk ..??)??.??
w/ flow-tools you can write flow-nfilter such that you aggregate networks into abstractions and tag them. then you generate your rrd (or whatever) by-tag instead of by-host. not hard. - bill _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
