rmon

[carter at qosient.com]

Hey Robert,
racount() is a very light weight aggregator, so not really the tool to use.
Try thinking racluster().

So how about:
   racluster -r file -m matrix/20

This will give you all the nets.
Carter

Carter Bullard
QoSient LLC
150 E. 57th Street Suite 12D
New York, New York 10022
+1 212 588-9133 Phone
+1 212 588-9134 Fax

-----Original Message-----
From: Robert Leyba <r_leyba14 at yahoo.com>

Date: Sat, 2 Jun 2007 07:32:28 
To:argus-info at lists.andrew.cmu.edu
Subject: [ARGUS] Re: rmon


Hi CS,
    Thanks for the reply.  Honestly, still trying to dissect the concept of
flows ( and flow directions!)   Will google more of this.   At any rate, going
back to my original question, if we were to start measuring the traffic between
our two subnets would the syntax be:

root <at> cpocts:/tmp# racount -M rmon -r outfile - net 10.52.32.215/20 and net 
10.22.97.10/20  -L0

...or would it be the same command above but without the -M rmon parameter?

Basically we would want to measure ALL the data that flows between the subnets,
regardless of direction.

Thanks again

--robert