Try something like: flow-cat <rawflowfile> | flow-stat -f27 -S1
It should look something like... flow-cat ft-v05.2011-06-10.080000-0500 | flow-stat -f27 -S1 # --- ---- ---- Report Information --- --- --- # # Fields: Total # Symbols: Disabled # Sorting: Descending Field 1 # Name: Exporter IP # # Args: flow-stat -f27 -S1 # # # IPaddr flows octets packets # 192.168.248.94 1359240 3496215272 8276436 10.52.99.207 1013474 1372190032 6515101 10.9.134.1 646980 5556916613 13528602 10.9.102.1 570179 4689640192 7573009 10.1.248.94 504930 4084392285 6049459 192.168.248.70 341754 1015514041 2848515 192.168.248.71 338975 1018366783 2844842 10.52.99.206 327762 3313665447 9548243 192.168.248.72 292345 850827192 2404998 192.168.248.73 245266 739576205 2038202 192.168.248.74 229216 650250195 1859178 10.52.99.198 144104 6893796403 6782040 192.168.248.69 129446 322255287 912556 192.168.248.75 64100 169485418 465391 10.52.99.199 50404 4539117637 4835330 10.1.248.73 40837 75110116 222110 10.1.248.71 40434 68587894 209636 10.1.248.74 40342 79348806 235908 10.1.248.69 38966 62251706 201520 10.1.248.72 38176 64407306 204477 10.1.248.70 37941 62888453 201695 10.52.99.204 29911 1421913606 2930917 10.9.114.254 12780 103590369 291088 10.9.144.254 2160 423906 5208 10.52.99.205 354 3547963 79629 10.1.248.75 208 403635 1486 > If you are not the intended recipient of this message (including attachments), or if you have received this message in error, immediately notify us and delete it and any attachments. If you no longer wish to receive e-mail from Edward Jones, please send this request to [email protected]. You must include the e-mail address that you wish not to receive e-mail communications. For important additional information related to this e-mail, visit www.edwardjones.com/US_email_disclosure -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of > David Faught > Sent: Thursday, June 16, 2011 9:02 AM > To: flow-tools > Subject: [Flow-tools] flow data exported volume > > How do I get a report of the volume of exported flow records > by exporter? Most of the reports deal with the data that the > flow records represent, but I need to see how much overhead > is added by the flow records themselves. > > Thanks for any help! > > Dave > _______________________________________________ > Flow-tools mailing list > [email protected] > http://mailman.splintered.net/mailman/listinfo/flow-tools > _______________________________________________ Flow-tools mailing list [email protected] http://mailman.splintered.net/mailman/listinfo/flow-tools
