Tracking source/destination application bytes

[Carter Bullard]

Hmmmmm, this is pretty easy to do, but what are you really asking for?
Do you want something to "know" what the src/dst byte ratio for each
application client/host pair is suppose to be and notify you if somehow
it changes?  Again this is very easy to do, in say perl, but what/how  
would
you want such a program to be structured?

Hmmmm, graphing based on protocol is very easy:

    ragraph sbytes dbytes proto -M time 5m -r daily.files

Of course if you want something more detailed:

    ragraph sbytes dbytes proto -M time 5s -r daily.files

Carter


On Apr 16, 2007, at 11:47 AM, CS Lee wrote:

> Hey people,
>
> I'm looking for a way to track the changes of source and  
> destination application bytes over time from the flow(for example I  
> can easily look at whether people are either doing http surfing or  
> http file transfer. I have tried few combinations and has no  
> success so I guess it would be good to turn into mailing lists. Is  
> that possible to do it in argus way?
>
> Another thing is that I think a lot of people want a Protocol  
> Breakdown in daily basis, I know racluster can do it when combining  
> with rasort. But is that possible to generate the graph for all the  
> Protocol breakdown by using ragraph, or our alternative is we still  
> have to use it with excel to do it(that's what i do for now).
>
> Thanks.
>
> -- 
> Best Regards,
>
> CS Lee<geekooL[at]gmail.com>

Carter Bullard
CEO/President
QoSient, LLC
150 E. 57th Street Suite 12D
New York, New York 10022

+1 212 588-9133 Phone
+1 212 588-9134 Fax


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20070417/897a1321/attachment.html>