[flow-tools] Re: Peak traffic rate in bytes/sec

[Mark Fullmer]

I think you may want two reports, top talkers every 5 minutes and one for
24 hours.  Some people prefer 5 minute reports, others daily, others weekly.
It really depends on what you're looking for.

# daily report
flow-cat <a day of data> | flow-stat <...>

# 5 minute report
flow-cat <a day of data> | flow-split -T300 -osampled
foreach file in sampled*; do
  flow-stat $file <...>
done

The foreach loop may not work correctly if your shell doesn't 
support numeric glob sorting.

...I do what I can to answer questions on the flow-tools list.  There
are 230+ other subscribers who are more than welcome to chime in :)

mark

On Fri, May 17, 2002 at 09:54:11AM -0700, Annie Tong wrote:
> Hi Mark,
> 
> I have sent this mail out before but since I haven't got the reply from 
> you, you might have missed my mail.  I want to add an option for 
> flow-stat to print the peak traffic rate for the top talkers in 
> bytes/sec for a given period of time.  I'm thinking the logic will be 
> something like storing the peak traffic rate for the top talkers for 
> each 5 mins interval, and compare the peak rates at the end to find the 
> real peak rate value for each top talker.  However since the top talkers 
> for each 5 mins interval don't necessary equal to the top talkers for 
> the evaluation period, this approach may not be efficient.  Any idea on 
> how the logic should be?  I really have no idea on how to approach this, 
> so any help will be greatly appreciated!
> 
> Thank you!
> 
> Regards,
> 
> Annie Tong
> MAE Engineering
> MCI WorldCom
> 
> 
> _______________________________________________
> flow-tools@splintered.net
> http://www.splintered.net/sw/flow-tools