On Sun, May 22, 2005 at 11:11:00PM -0400, Mark Fullmer wrote: > If it's a single IP source or destination you can find it by > aggregating on the IP address then sorting by flows. > > # top 10 src IP sorted by flows > % flow-cat <data> | flow-report -vSORT=+flows -vTYPE=ip-source-address > -vRPTOPT=-m10
[...] > or just use flow-stat which I'd like to kill off now since flow-report > can do so much more. And break all my scripts? I understand your desire to exterminate the ungainly and clumsy predecessor of flow-report, but some of the existing users would like to leave well enough alone. If flow-report can now do everything that flow-stat does just via the command line, how about making "flow-stat" a symlink to flow-report and have flow-report recognize the flow-stat options? Or a shell script that reformats the options and calls flow-report? -- Ed, who hasn't gotten around to learning flow-report yet, but now that it's usable via the command line, might get his feet wet... _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
