It's got nothing to do with netflow ... the traffic matrix is generated based on the packets seen (whether they're on a real device or the netflow pseudo-device is irrelevant).
Flows might work for smaller cases ... For example, I use: -F "Time='host ntp-cup.external.hp.com or wuarchive.wustl.edu or clock.psu.edu or ntp2.kansas.net'" To aggregate the count of traffic to/from the ntp servers I use, giving me this (well, imagine it's an html page): Flow Name Packets Traffic Time 16 1.5 KB You can add a few more, but it all becomes filters applied to each packet, and so you don't want too much on a busy system... If you're looking for more aggregation, more data, etc., then since I have no interest/need for any further aggregation - the Local-Local matrix meets my needsi - I suggest you either code it yourself (we'd love the contribution) or contact Luca directly WRT sponsoring the development effort. -----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of [EMAIL PROTECTED] Sent: Monday, January 13, 2003 10:54 AM To: [EMAIL PROTECTED] Subject: Re: [Ntop] Ntop and Netflow: how to get the Traffic Matrix? So, if I understand correctly, I cannot aggregate on any Netflow traffic Key Field for the moment. Will we have aggregation schemes support in the future? I was exploring with the -F option but I am a bit confused on what it is supposed to do. As "site" I would define a number of subnets behind the local router. Gulliver >-- Original Message -- >From: "Burton Strauss" <[EMAIL PROTECTED]> >To: <[EMAIL PROTECTED]> >Subject: Re: [Ntop] Ntop and Netflow: how to get the Traffic Matrix? >Reply-To: [EMAIL PROTECTED] >Date: Mon, 13 Jan 2003 06:44:16 -0800 > > >The existing traffic matrix is host-host for L-L (local - local) only. However, >that code could be a model for you to work from. > >Note that specifying what is a "site", when there are multiple address ranges >will become difficult. > > >-----Burton > >---------- Original Message ---------------------------------- >From: [EMAIL PROTECTED] >Reply-To: [EMAIL PROTECTED] >Date: Mon, 13 Jan 2003 12:52:25 +0100 > >>Hi everyone, >> >>Can someone suggest how to get traffic matrix >>when collecting Netflow data? >> >>I'd like to be able to create matrix traffic based on >>single host, subnets or a whole site (multiple subnets). >> >>Thanks, Gulliver >> >> >> >> >>********************************************* >>Vous surfez toujours avec une ligne classique ? >>Faites des economies avec Tiscali Complete... >>Plus d'info sur ... http://complete.tiscali.be >> >> >>_______________________________________________ >>Ntop mailing list >>[EMAIL PROTECTED] >>http://listgateway.unipi.it/mailman/listinfo/ntop >> > > >____________________________________________________________ >Free 20MB Web Site Hosting and Personalized E-mail Service! >Get It Now At Doteasy.com http://www.doteasy.com/et/ >_______________________________________________ >Ntop mailing list >[EMAIL PROTECTED] >http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
