Am 09.08.21 um 21:18 schrieb Jens Hektor:
> Particularly I try to look at top talkers of these files,
> especially in the "inet6" domain:
>
> -rw-r--r--. 1 apache apache 3,5G 9. Aug 08:00
> /usr/local/nfsen/profiles-data/live/ixia-poc/2021/08/09/nfcapd.202108090755
> -rw-r--r--. 1 apache apache 2,3G 9. Aug 08:04
> /usr/local/nfsen/profiles-data/live/ixia-poc/2021/08/09/nfcapd.202108090800
> -rw-r--r--. 1 apache apache 891M 9. Aug 08:10
> /usr/local/nfsen/profiles-data/live/ixia-poc/2021/08/09/nfcapd.202108090805
> -rw-r--r--. 1 apache apache 702M 9. Aug 08:15
> /usr/local/nfsen/profiles-data/live/ixia-poc/2021/08/09/nfcapd.202108090810
> -rw-r--r--. 1 apache apache 674M 9. Aug 08:20
> /usr/local/nfsen/profiles-data/live/ixia-poc/2021/08/09/nfcapd.202108090815
> -rw-r--r--. 1 apache apache 737M 9. Aug 08:25
> /usr/local/nfsen/profiles-data/live/ixia-poc/2021/08/09/nfcapd.202108090820
>
> 2021/08/09/nfcapd.202108090820: Sys: 36.063s
> 2021/08/09/nfcapd.202108090815: Sys: 38.893s
> 2021/08/09/nfcapd.202108090810: Sys: 35.795s
> 2021/08/09/nfcapd.202108090805: Sys: 6141.546s
> 2021/08/09/nfcapd.202108090800: - still waiting (started 3 hours ago)
Finally it finished after 3.5 days :-/
---------------------------------------------------
root@graph-2 16:24:24 ~> /usr/local/bin/nfdump -M
/usr/local/nfsen/profiles-data/live/ixia-poc -r 2021/08/09/nfcapd.202108090800
-n 10 -s ip/flows -6 "(( ident ixia-poc) and ( ( inet6 and src net
2a00:8a60::/32 ) ) or ( ident ixia-poc) and
( ( inet6 and dst net 2a00:8a60::/32 ) ))"
Top 10 IP Addr ordered by flows:
Date first seen Duration Proto IP Addr
Flows(%) Packets(%) Bytes(%) pps bps bpp
2021-08-09 07:59:23.803 336.171 any 2a00:8a60:1014:88::56
15.6 M(96.2) 16.5 M(26.4) 1.3 G( 2.2) 48971 31.1 M 79
[...]
2021-08-09 07:59:49.994 299.963 any 2a00:8a60:0:f001::4
6651( 0.0) 8897( 0.0) 700214( 0.0) 29 18674 78
Summary: total flows: 16184639, total bytes: 59.4 G, total packets: 62.4 M, avg
bps: 1.3 G, avg pps: 173343, avg bpp: 951
Time window: 2021-08-09 07:59:00 - 2021-08-09 08:04:59
Total flows processed: 16184639, Blocks skipped: 0, Bytes read: 2441251360
Sys: 300384.105s flows/second: 53.9 Wall: 300376.816s flows/second: 53.9
---------------------------------------------------
_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
