[EMAIL PROTECTED] wrote on 10/17/2008 02:40:55 PM: > On Thu, Oct 16, 2008 at 10:55:29AM +0000, Borg Tinderne wrote: > > Raw netflow is a box centric view of network traffic,????the few netflow > > display products I have played with over the last decade or so continue > > with this box-centric view , can't comment on nfsen.???? As interesting > > as a box-centric view is,?? I generally find I want a network-centric > > view of network traffic,?? so post processing of flow data with something > > ,??for me this has been RYO, so??choose your own poison ( perl / sql / > > tcl??/ awk ..??)??.?? > > w/ flow-tools you can write flow-nfilter such that you aggregate > networks into abstractions and tag them. then you generate your rrd > (or whatever) by-tag instead of by-host. not hard. ^^^^^^^^^^^^^
Yep. You could substitute the directory name, which you used to store the tagged aggregate, for a device-name in FlowViewer, and you will have access to the whole set of those web tools. Joe _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
