On Thu, Oct 28, 2010 at 08:24:23AM -0400, Drew Weaver wrote:

> So you can do stuff like this in nfdump?
> 
> ./flow-cat /var/netflow/ft/ft-v05.2010-10* | ./flow-filter -Dnetwork | 
> ./flow-stat -f19 -S2 | more
> 
> To find a list of the top AS numbers sending you traffic?

More or less - they support AS aggregation reports, assuming
you have AS data in the flow records, but you'd need to sort it
yourself afterwards.

_______________________________________________
Flow-tools mailing list
[email protected]
http://mailman.splintered.net/mailman/listinfo/flow-tools

Reply via email to