Calculating bits per second - the best way.

[Richard Rothwell via Argus-info]

Hi List,

>>>>>>>>>
I have inherited some code that calculates bps by:

  1.  Multiplying bytes by 8
  2.  Dividing by the rabins hold value.

This seems kind of dubious to me, assuming my understanding of the hold value is correct.
Should it not be:

  1.  Multiplying bytes by 8
  2.  Dividing by the dur value expressed as seconds.

That way the time duration will either be:

  1.  The original argus record dur for flows that fit within a bin.
  2.  A fraction of original argus record dur for flows that cross a bin boundary.
  3.  The same as the rabins "–M time" value for flows that straddle a bin.

Also will need to make some tweak if the dur value happens to be zero.

>>>>>>>>>>
Squeezing in another question.
I am using a rabins hold time of 10s and a bin time of 60s with data sourced from a router that is using a 60s interval to detect flows.
I suspect I need to increase the hold value to 60s or greater. Is this correct?

Regards from Richard


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20160509/ca5d1fe8/attachment.html>