ramon, ragator, flows and networks.

[Scott A. McIntyre]

Hi,

I have an interest in figuring out, per subnet, the top "talkers" to
other subnets.  In order to do some network provisioning, we're looking
to find the most active (in terms of traffic sent/received) networks
that are talking to certain specific subnets of ours.

Is this something that argus can do?  It seems like the rough plumbing
for it is definitely there, and in the case of ragator perhaps that's
the exact tool I need, but I'm not sure how to best go about creating a
flow model that generates the type of data I'm looking for.

My goal is to have a breakdown so that I get something similar to ramon
output, as so:

988847907     ip 192.168.15.0/24                 0        3689339   0 221692479   INT
988847926     ip 192.168.37.0/24                 94475    0 101755360    0           INT
988847926     ip 10.20.10.0/24                   0        94444     0 101753470   INT

With each of those addresses being networks sending or receiving data to
certain target networks of ours.

Any hints would be appreciated!

Scott