RE: [Flow-tools] newcomer's two questions

[Joe Shen]

Title: 邮件

Thanks. I think I have not express my first question exactly.   What I want to change is the naming pattern used by flow-capture. The reason for this is, we collect netflow data with a PC server, which mounts two hard disk(2*60G) onto two directores.  Multiple flow-capture daemon  are started and listen on different upd ports, they store netflow data onto different directories.  Those files are linked to flowscan data directory for processing.    Noticing the naming pattern in data directories are the same,  I have to avoid possible problem in file linking operation. So, I want to modify the naming pattern of different flow-capture daemon, e.g. flow-capture daemon-1  names with "ft-v*-wl-*", flow-capture daemon-2  names with "ft-v*-jf-*"etc. By this way, we just need to configure flowscan with "ft-v*".   Could I do this?     Regards   Joe  Shen   -----Original Message----- From: Robert S. Galloway [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 14, 2004 11:39 PM To: 'Joe Shen'; [EMAIL PROTECTED] Subject: RE: [Flow-tools] newcomer's two questions Hi Joe,   Assuming that you are using FlowScan to process the flow files, you should be able to change the file name if you update the FlowScan.cf configuration. I’ve never had reason to try it. If you need full statistics on each subnet on the network, you should look into the JKFlow module for FlowScan. (Sorry, I don’t have the URL off the top of my head.)   http://www.linuxgeek.org/netflow-howto.php   Thanks,   Robert S. Galloway Chief Network Security Engineer IKANO Communications ...the Internet branding company Official Data Networking Services Provider for the Salt Lake Olympic Winter Games of 2002 [EMAIL PROTECTED] 801-415-8089   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joe Shen Sent: Wednesday, April 14, 2004 3:36 AM To: [EMAIL PROTECTED] Subject: [Flow-tools] newcomer's two questions   Hi,   I'm a new comer of flow-tools. My question is : could I change those data file name from ft-* to ft-my-prefer-* ?   Is there any scripts or tools available to process raw data to show statistics of subnet traffic?   thanks in advance.     Regards   Joe Shen

_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools