On Jan 07, "Webb, Nathan" wrote:

Last but not least along these lines, I really like flow-divide, which is
in the contrib directory.  You input your flows and you get out a bunch of
files that represent your subnets based on a config file.

> Another option is to filter on the IP subnets.  If they have fixed ip
> addresses, then this is probably going to be the easiest of all options.
> 
> If the IP is dynamic, then provided that you retain logs of the IPs that
> are allocated, you will be able to write a script that builds a filter
> configuration file to extract flows for a certain IP address during the
> times that the customer was connected.  We're currently during this for
> dial-up customers by extracting data from the radius logs.
> 
> Bear in mind that if you have multiple exporters, then you will also
> need to filter out all but the directly connected router, otherwise you
> will get duplicate flows from other exporters by using this method.
_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools

Reply via email to