I will answer myself, after having spend more time into it, the best solution I found was to reuse the profiles already created when I finally found them, so the solution is the 3rd: > .- Create the graphic I need with nfsen and export the rrd it's using, > it would be ok, but I haven't been able to find the rrd it is using...
So: 1.- Create a profile with the filters and channels you need. 2-. Use a script like this to extract the 95th percentile for the last 2 months traffic: #95 percentile rrdtool graph -f '' -s '-2 months' /dev/null \ DEF:traffic_in="/var/lib/netflow/profiles-stat/profile1/ac1_grn_es.rrd":traffic:AVERAGE \ CDEF:traffic_inbits=traffic_in,8,* \ VDEF:95pct_in=traffic_inbits,95,PERCENT \ PRINT:95pct_in:"95th='%.2lf %s'" That should be mostly ok :) 2012/7/9 Joan <[email protected]>: > Hello, > > I'd like to create some rrd by using the data extracted from the flows > I've historically collected. My final motivation is to get the 95th > percentile for traffic profile. > > My options were the following (none is working so far): > .- dumping the data with nfdump and postprocess it with some kind of > calculator > -> I need the values in 5 minute interval, don't know how can I > aggregate the data by time, I could do it by calling nfdump on every > file, but it seems to be non-optimal. > > .- dumping the data into an rrd file, that might be a better solution > because it's quite easy to calculate the 95th percentil for that, but > still don't know how to push all the data into the rrd > > > > Any help appreciated. > > Regards, > > Joan ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ Nfdump-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
