What is this fixation with top talkers? With most links at speeds of 100mb or better we should really be looking for the low and slow stalkers!
Bigfoot. >>> From: 'Ed Ravin' <[email protected]> To: Drew Weaver <[email protected]> Date: 10/28/10 8:55 AM Subject: Re: [Flow-tools] IPv6 Support CC: "[email protected]" <[email protected]> On Thu, Oct 28, 2010 at 08:24:23AM - 0400, Drew Weaver wrote: > So you can do stuff like this in nfdump? > > ./flow- cat /var/netflow/ft/ft- v05.2010- 10* | ./flow- filter - Dnetwork | > ./flow- stat - f19 - S2 | more > > To find a list of the top AS numbers sending you traffic? More or less - they support AS aggregation reports, assuming you have AS data in the flow records, but you'd need to sort it yourself afterwards. _______________________________________________ Flow- tools mailing list flow- [email protected] http://mailman.splintered.net/mailman/listinfo/flow- tools _______________________________________________ Flow-tools mailing list [email protected] http://mailman.splintered.net/mailman/listinfo/flow-tools
