here are some quick and dirty one liners: Top 20 sources:
flow-cat -p <directory of flow files> | flow-stat -S2 -n -f9 | head -22 | tail -10 Top 20 destinations: flow-cat -p <directory of flow files> | flow-stat -S2 -n -f8 | head -22 | tail -10 Top 20 destination ports (services): flow-cat -p <directory of flow files> | flow-stat -S2 -n -f5 | head -22 | tail -10 check out flow-stat --help for more options. you can also insert flow-filter or flow-cidr commands in between the flow-cat and the flow-stat to further filter the results. if you want something more regular you might want to study flow-report. good luck! Quoting Paul Dokas <[EMAIL PROTECTED]>: > On Fri, 15 Oct 2004 06:53:17 -0700 (PDT) shawn reed <[EMAIL PROTECTED]> wrote: > > Can someone provide some assistance or direct me to the right resources please. I > > am attempting > to create a few reports in table form using flow-tools. > > > > - top 20 talkers > > > > - top 20 sources > > > > - top 20 services > > > > I need to be able to configure the time period for the reports then import them > > into excel for > reporting. > > > I wrote a perl script to report top talkers by bandwidth, flows, count of hosts > touched that you > could > probably adapt to your needs: > > ftp://ftp.cs.umn.edu/dept/users/dokas/find_scanners > > Just please pass diffs back to me for integration. > > Paul > -- > Paul Dokas [EMAIL PROTECTED] > ====================================================================== > Don Juan Matus: "an enigma wrapped in mystery wrapped in a tortilla." > _______________________________________________ > Flow-tools mailing list > [EMAIL PROTECTED] > http://mailman.splintered.net/mailman/listinfo/flow-tools > ------------------------------------------------------- William Emmanuel S. Yu Department of Information Systems and Computer Science Ateneo de Manila University email : wyu at ateneo dot edu web : http://CNG.ateneo.net/cng/wyu/ phone : +63(2)4266001-4186 GPG : http://CNG.ateneo.net/cng/wyu/wyy.pgp _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
