Argus 3.0 Client documentation ?

[Carter Bullard]

Hey John,
    try this:
       racluster -r file -M rmon -m saddr  - ip  ( this generates  
stats based on IP address)
       racluster -r file -m matrix - ip    (based on IP matrix)

    to do whatever TopN you want, pipe the output to rasort().
    So to get the Top10 in packets received and transmitted:
       racluster -r file -M rmon -m saddr -w - | rasort -m pkts -w -  
| ra -N 10

    To get the Top5 in bytes per second transmitted:
        racluster -r file -M rmon -m saddr -w - | rasort -m srate -w  
- | ra -N 5 -s +srate

Hope this is helpful, if you have any problems, send email!!!!

Carter


On Mar 21, 2007, at 3:06 PM, John Wade wrote:

> Hi All,
>
> Can anyone direct me to anything that would help document the 3.0  
> client programs.   Specifically, I am trying to figure out how to  
> use racluster to replace ramon  as was noted in an email about the  
> clients on 2/12.  Specifically I am looking for functionality like:  
> ramon -M TopN or -M Matrix   I have been through the man pages for  
> racluster in rc.42 and I could not find what I was looking for, but  
> maybe I am an idiot.
>
> Thanks in advance for the help,
> John Wade
>