Hi all!
I have this report:
stat-report srcdst_haggr
type ip-source/destination-address
output
format ascii
sort +octets
fields +first,+octets,-packets,-duration,-flows
stat-definition srcdst_haggr
time-series 3600
report srcdst_haggr
And i give this table:
# first,ip-source-address*,ip-destination-address*,octets
...
How i can get MIN(UNIX_SECS) and MAX(UNIX_SECS)
for "ip-source/destination-address" group?
In SQL it would look like this:
SELECT src_ip, dst_ip, MIN(usecs) AS min_usecs,
MAX(usecs) AS max_usecs, SUM(octets) AS octets,
SUM(packets) AS packets, COUNS(*) AS flows
FROM flows_table
GROUP BY src_ip, dst_ip
I need to know start time of the first and
start time of the last flow in the grouping.
How?
--
Sergey V. Sokolov
nic-hdl: SVS141-RIPE
X-NCC-RegID: ru.gorizont
_______________________________________________
Flow-tools mailing list
[email protected]
http://mailman.splintered.net/mailman/listinfo/flow-tools
