Breaking down selected traffic

[Carter Bullard]

Hey Andrew,
   All things are possible, but we may have to make a
slight change.  The problem is that your filter is
being applied to the input as well as the output, and
you are filtering out the results.

   This is done because of the way that ramon works,
and is somewhat unavoidable for most uses of ramon.
If you were to do this:

   ra -r argus.log -w - - net x.y.z/24 | ramon -M svc net/24

you should get the results you're looking for.

Carter



> -----Original Message-----
> From: owner-argus-info at lists.andrew.cmu.edu 
> [mailto:owner-argus-info at lists.andrew.cmu.edu] On Behalf Of 
> Andrew Pollock
> Sent: Friday, May 02, 2003 10:14 PM
> To: argus-info at lists.andrew.cmu.edu
> Subject: Breaking down selected traffic
> 
> 
> Hi,
> 
> I'm using ramon to work out how much traffic is going to 
> various networks
> like this:
> 
> ramon -M TopN -M net/24 -w - -r argus.log - net x.y.z/24 | racount
> 
> I'd like to be able to break down by service the total 
> produced (and hope
> it adds up to the total produced above), however, when I go:
> 
> ramon -M Svc -r argus.log - net x.y.z/24
> or
> ramon -M Svc -M net/24 -r argus.log - net x.y.z/24
> 
> I get nothing back.
> 
> Is it possible?
> 
> Andrew
>