rabins, ragraph and aggregation of protocols
Jesper Skou Jensen
jesper.skou.jensen at uni-c.dk
Tue Feb 11 09:24:59 EST 2014
I'm using rabins and ragraph to create some nice PNG graphs and I would
like to be able to show only specific protols and aggregate the rest
At the moment I use "rabins proto pkts -M 1s -r input.ra -w
output.rabins" to creatate rabins files every time I rotate my files and
then later on I trawl those rabins files with ragraph and create the PNG
The .rabins files contain tcp, udp, esp, icmp, llc and various other
protocols and when I create the PNG graphs they are shown in various colors.
I would like to keep tcp, udp and aggregate the rest into a combined
misc bin. Is that possible? As in to show tcp as green, udp as blue and
misc as grey, or something like that.
More information about the argus