My understanding of "flow-stat -f 11" is that it displays both source and destination IP addresses, so the following:
flow-cat ft-.... | flow-stat -f 11 | grep 192.168. will show all entries where the source or the destination IP contains 192.168. This is different to in/out traffic. For In traffic, you might want to look at all traffic where the destination starts with 192.168. (or the source doesn't start with 192.168.) e.g. flow-cat ft-... | flow-stat -f8 | grep 192.168. -Nathan -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Paul Halliday Sent: Tuesday, 15 February 2005 4:54 AM To: [email protected] Subject: [Flow-tools] in/out traffic. Hi, I am trying to calculate in/out traffic. I am basically trying: flow-cat ft-.... | flow-stat -f 11 | grep 192.168. flow-cat ft-.... | flow-stat -f 11 | grep -v 192.168. I was under the impression that the first one would give me outbound and the second inbound. When I sum the numbers from both outputs and add them I get a different answer than: flow-cat ft-.... | flow-stat -f 15 <-- looking at the octets field. Could someone please clarify? Thanks. -- _________________ Paul Halliday http://dp.penix.org "Diplomacy is the art of saying "Nice doggie!" till you can find a rock." _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools --- This email and any files transmitted with it are confidential to the intended recipient and may be privileged. If you have received this email inadvertently or you are not the intended recipient, you may not disseminate, distribute, copy or in any way rely on it. Further, you should notify the sender immediately and delete the email from your computer. Whilst we have taken precautions to alert us to the presence of computer viruses, we cannot guarantee that this email and any files transmitted with it are free from such viruses. _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
