I'm experimenting with the -t flag to automate report creation. My thought was to run it in a cron job at the beginning of every month to tell me how much traffic I'm exchanging with top N ASNs. My understanding of the -t flag is that it will reel back to as close to the beginning of the specified date as there is a capture file for and run through to the most recent date that there is a capture file for. I ran a dump from a bit before my first capture file with no end date specified. The results showed that the end date was in the future; March 1, to be exact. I can't help but to suspect that might be incorrect behavior?
[root@monitor01 ario]# /usr/local/bin/nfdump -s as/bps -l 100K -n 10 -t 2012/01/01 -M /opt/nfsen/profiles-data/live/bfr01-hudson:bfr01-mowat:bfr01-front -R . Packet limit: > 100000 packets Top 10 AS ordered by bps: Date first seen Duration Proto AS Flows(%) Packets(%) Bytes(%) pps bps bpp 2013-01-02 22:33:07.424 4974813.517 any 0 480.9 M(87.4) 268.1 G(88.3) 195.0 T(89.4) 53893 313.6 M 727 2013-01-02 22:58:42.435 4973265.240 any 22822 52.6 M( 9.6) 56.3 G(18.6) 40.7 T(18.6) 11329 65.4 M 722 2013-01-02 22:39:34.154 753306.660 any 852 9.6 M( 1.7) 5.3 G( 1.8) 3.7 T( 1.7) 7076 39.1 M 691 2013-01-02 23:02:03.007 751957.762 any 14618 7.5 M( 1.4) 4.7 G( 1.5) 3.6 T( 1.7) 6195 38.4 M 775 2013-01-02 23:01:40.734 751112.390 any 12767 2327( 0.0) 2.5 G( 0.8) 3.4 T( 1.6) 3355 36.4 M 1357 2013-01-02 23:06:52.828 751663.663 any 19693 29135( 0.0) 2.3 G( 0.8) 3.4 T( 1.6) 3074 36.1 M 1466 2013-01-02 22:56:35.802 4973405.102 any 14387 55.5 M(10.1) 27.3 G( 9.0) 17.8 T( 8.1) 5494 28.6 M 650 2013-01-02 23:02:12.800 751948.008 any 38621 3.9 M( 0.7) 3.5 G( 1.2) 2.5 T( 1.2) 4710 26.8 M 711 2013-01-02 22:59:17.693 4973243.209 any 15169 38.4 M( 7.0) 18.7 G( 6.2) 13.9 T( 6.4) 3768 22.3 M 740 2013-01-02 23:02:38.728 751921.823 any 15133 3.5 M( 0.6) 1.9 G( 0.6) 1.7 T( 0.8) 2569 18.4 M 896 Summary: total flows: 550408858, total bytes: 218.2 T, total packets: 303.7 G, avg bps: 350.8 M, avg pps: 61053, avg bpp: 718 Time window: 2013-01-02 22:33:07 - 2013-03-01 12:26:40 Total flows processed: 550408858, Blocks skipped: 0, Bytes read: 50639328208 Sys: 213.513s flows/second: 2577864.0 Wall: 504.720s flows/second: 1090521.3 [root@monitor01 ario]# ------------------------------------------------------------------------------ Master HTML5, CSS3, ASP.NET, MVC, AJAX, Knockout.js, Web API and much more. Get web development skills now with LearnDevNow - 350+ hours of step-by-step video tutorials by Microsoft MVPs and experts. SALE $99.99 this month only -- learn more at: http://p.sf.net/sfu/learnmore_122812 _______________________________________________ Nfsen-discuss mailing list Nfsen-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
