Argus newbie

[Pallis, Georgios]

Thanks for the useful information you provide. Will have a look on the things you discussed. By the way which version of NetFlow does the last development version support? In the site you mention that code for NetFlow v9 is coming.

Regards,
George

________________________________________
From: Carter Bullard [carter at qosient.com]
Sent: 15 July 2010 19:09
To: Pallis, Georgios
Cc: argus-info at lists.andrew.cmu.edu
Subject: Re: [ARGUS] Argus newbie

Hey George,
One tool that I think you should start looking at is rahisto().  This will do
frequency distributions for any metric that you may want to do.  In particular
it will be good for doing bandwidth analysis for your VoIP calls.

Configure argus to generate status reports at whatever interval you like.
I use either 1s or 5s, but if you really want to get to know your application,
you can set it as low as 0.000001s.  I do this when we're measuring bw
and jitter at 10Gbps+.

You can then use rahisto() to give you the histogram
of the bandwidth of each status interval (the time when the flow is active).

What you get out of the exercise is average bandwidth, stddev, and peak
bandwidth, all of which can give you a better understand of resource
utilization, when the flow is active.

There are other tools that you will also want to use, such as rabins()
which can help you manage the time series data.  This is the program
at the core of ragraph(), but it can do a lot of very important things for
you.

Keep the email coming, as you get along.

Carter


On Jul 15, 2010, at 1:59 PM, Pallis, Georgios wrote:

> Yes, I 've already setup an NTP server in one of my routers exactly for the reasons you described. Well, OK! I 'll start doing packet capturing with Argus running on both machines and later on I 'll proceed with data analysis by ragraph (or whatever). Will keep in touch for this part of the procedure after having the argus output files. Thank you.
>
> Regards,
> George
>