ramon -M HostSvc

Andrew Pollock andrew-argus at andrew.net.au
Mon Sep 29 00:59:23 EDT 2003

Hi Carter,

Have you had a chance to think about this at all?

As it turns out, I'm not the only one trying to do this sort of a 
breakdown of information, I've had another user contact me privately in 
response to this particular email...

Hope you are well.



On Mon, Sep 15, 2003 at 01:34:29PM +1000, Andrew Pollock wrote:
> Hi Carter,
> I'm playing with the new -M HostSvc option for ramon, and trying to work 
> out how best to use it to provide the breakdown for the billing totals I 
> produce with ramon -M TopN...
> So far, the breakdown I have seems to involve showing only the outbound 
> half of the flow, i.e. for a bunch of webservers, I get a Dport column 
> that has a whole pile of ephemeral ports for what would have been the 
> reply traffic going back to the webservers' clients. As we charge for 
> inbound, we're more interested in a breakdown of the inbound traffic. 
> Obviously for a webserver, it's mainly going to show how much went to port 
> 80 or 443, but this is more what we're after.
> I'm currently invoking ramon the same way as I do to produce the billing 
> total, with an additional -M HostSvc option. Is this correct, or should I 
> be substituting the TopN for the HostSvc?
> regards
> Andrew

More information about the argus mailing list