RE: [Flow-tools] Reporting questions

[Robert S. Galloway]

Title: Installation problems

Hi Ross,   I’m glad you got everything going. I’ll do my best to answer your questions.   The negative on the graphs is incoming traffic. The positive is outgoing. If you are comfortable modifying the code, you can modify the colors in CUGrapher under the “sub setColors” section. You can manually manipulate the graph times, etc. by changing the URL itself. Most of the options should be straight forward. Play with it a bit and I’m sure you’ll figure it out. CUFlow doesn’t currently support break downs by subnet, only by router. If you need to do this, you should look at JKFlow. All of the flow-tools setup and such will work as is, you would just be changing the report module. I have not had time to really dig into JKFlow. It’s still on my todo list, but it can build a lot more detailed graphs and such, but it comes at the expense of a far more complicated configuration. I’m not really sure what’s up with the symlinks. The only thing I can think of is to check and make sure that everyone has read access to the files and directory.   Thanks, Robert S. Galloway "You have enemies? Good. That means you've stood up for something, some time in your life." -- Winston Churchill From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ross Wimmersberger Sent: Monday, August 15, 2005 1:33 PM To: flow-tools@list.splintered.net Subject: [Flow-tools] Reporting questions   Well I finally got everything up and running.  CentOS on a VMware session powered by a GSX server, so far so good, no performance problems that I can tell so far.   Im having a little difficulty understanding the graphs/reports that its generating.  Why are their negative marks on the chart?  Is there a way to change the colors for the legend?  Is there a way to add time intervals (like view the past 1 hour in 5 minute intervals?)  How can I get the content of the traffic – What I want here is I get a notification that site A is using 115% of their bandwidth by another network tool (solarwinds), what I want to do is go to netflow click on that particular site, see what traffic is spiked, then if its FTP or HTTP, determine what site they are downloading stuff from, is that a possibility?      Also, I can’t do the toptalkers either, how do I do the Options FollowSymLinks?  I thought I enabled it in the gui portion of apache, and I did the ln –s etc…   Thanks so much for all the help   Ross   ------------------------------------------------ CONFIDENTIALITY NOTICE: This e-mail and any attachments are confidential. In the event that you have received this e-mail in error, please notify us immediately by returning it to the sender and then deleting all copies from your system.

_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools