[ARGUS] QoS Analysis with Argus

[Carter Bullard]

Hey James,
   Sorry for the delayed response.  Ragraph() definitely needs some
work, as all the client programs should be considered work in progress,
but for the most part, if the installation is good and there is
data to graph, then it should graph it, but in your case, you're
trying to graph objects that the 3.0.6 version doesn't support.
If you check out the perl source, you'll see what the distributed
version understands, starting on  line 167.  I'll put a more
complete ragraph() into the 3.0.7 test distribution soon.
(hopefully just a week).

   If you want to try to add more support, you really just need to
add the column name, just as it appears from any of the ra* programs,
for the metric you're interested in, and follow an example column,
like SrcBytes, through the code to see what needs to be done.  Not
hard, basically specify the databoject, whether its source or dst,
which describes what to do when you 'split' the graph, and then
specify a y-axis label, and the power() correction factor.  This
is important depending on if your reporting averages vs. accumulated values.
Bytes is a good example, if you want to report the total bytes then
the power function is 1.0.  If you want to report the average bytes
per bin, then the power function should be $STEP, the size of the bins
in seconds.  That should do it.

   Just a quick tutorial on ragraph().  ragraph()  is a perl script
that uses the program rahistogram() to take in raw argus data, and
formulate the time-series plot data.  It basically is just a ra*
program, so it handles most of the command line options.  The output
of rahistogram() includes some ragraph() specific information, like how
many bins, their size, what labels are to be used, followed by
comma separated fields of data.  Perl uses this data to define
an rrdtool database, load it up with data, and then generate graphs,
using the perl rrdtool commands.

   ragraph() understands that some columns of rahistogram() output are
metrics, some are the objects that are to be graphed (like saddr),
and so are providing labels, indicators for colors, etc....  If the
column label output doesn't provide ragraph() with a known metric
label, then that's a problem.  If it the label is a valid metric,
but there is no data to put into the rrdtool database, then rrdtool
has problems, and not always gracefully.


Hope this is helpful!!!

Carter



> From: James Lever <j.lever at uq.edu.au>
> Date: Thu, 15 Jul 2004 07:41:42 +1000
> To: Argus Info List <argus-info at lists.andrew.cmu.edu>
> Subject: Re: [ARGUS] QoS Analysis with Argus
> 
> Hi Carter,
> 
> Thanks for your detailed response.
> 
> ragraph's going well except the issue I posted about a while back
> regarding the ra option of gateway ip xx.xx.xx.xx which rahistogram
> doesn't seem to like.  I got around it by a nasty (saddr ip ... and not
> daddr ip ...) or (daddr ip ... and not saddr ip ...) type argument.
> 
> Trying to regenerate some graphs of retransmission, I'm seeing the
> following:
> 
> $ /usr/local/bin/ragraph retrans saddr -title 'All Traffic -
> retrans_saddr' -n -M 1m -width 1280 -r argus.2004-02-09-04:02.bz2 -w
> /home/jamver/Argus/ragraph/2004-02-09-04:02/retrans_saddr-all-1m.gif -
> usage: /usr/local/bin/ragraph metric (srcid | proto [daddr] | dport)
> [-title "title"] [ra-options]
> /usr/local/bin/ragraph: unable to create `/tmp/fileDjatUT.rrd': you
> must define at least one Data Source
> 
> Also, what arguments does one need to use to graph window sizes?
> 
> cheers,
> James
> 
>