-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- --On November 13, 2007 9:58:39 +0200 Adrian Popa <[EMAIL PROTECTED]> wrote:
| Hello,
|
| Replying to your first question:
|
| The porttracker plugin generates its statistics from ALL your nfsen
| sources. There is no (easy) way of mentioning which sources to
| consider for the statistics.
It's hard wired but you can change that easily in PortTracker.pm
in sun rub {}
my $netflow_sources = "$PROFILEDATADIR/$profile/$profileinfo{'sourcelist'}";
Selects all sources. You may replace it by:
my $netflow_sources = "$PROFILEDATADIR/$profile/src1:src2:src3
with src1, src2 src3 your selected sources.
- Peter
|
| Hope this helps.
| Adrian Popa
|
| On Nov 12, 2007 12:38 PM, cedric.delaunay <[EMAIL PROTECTED]> wrote:
| > Hy nfsen-users,
| > I'm trying to understand the porttracker's Top 10 statistics.
| > Unfortunately I have some difficulties. So here are a few questions for
| > nfsen's experts.
| >
| > - Which nfsen's sources are considered in porttracker's statistics ?
| > - Is there a nfdump command giving me an equivalent of the top 10 stats ?
| >
| > A newbie question : I didn't find how to get only stats lines with
| > nfdump ( -z option doesn't seems to modify the results)
| > as an example, I would like find the bytes send from X.Y.Z/24 network
| > during the last day.
| >
| >
| > Regards,
| > Cédric
| >
| >
| >
| >
| >
| > -------------------------------------------------------------------------
| > This SF.net email is sponsored by: Splunk Inc.
| > Still grepping through log files to find problems? Stop.
| > Now Search log events and configuration files using AJAX and a browser.
| > Download your FREE copy of Splunk now >> http://get.splunk.com/
| > _______________________________________________
| > Nfsen-discuss mailing list
| > [email protected]
| > https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
| >
|
| -------------------------------------------------------------------------
| This SF.net email is sponsored by: Splunk Inc.
| Still grepping through log files to find problems? Stop.
| Now Search log events and configuration files using AJAX and a browser.
| Download your FREE copy of Splunk now >> http://get.splunk.com/
| _______________________________________________
| Nfsen-discuss mailing list
| [email protected]
| https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag, Security Engineer, Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7
SWITCH, Werdstrasse 2, P.O. Box, CH-8021 Zurich, Switzerland
E-mail: [EMAIL PROTECTED] Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (Darwin)
iQCVAwUBRzoD+/5AbZRALNr/AQLNngP9HNNa4aFWkfpNX/tnmqDpXe6UbjFh7++e
gbJY9E3mXfvk35JdfIWhPByqd4sRtHA9j6rxCbmcLlQTPS2sl/Tj0hZZ9gyN8NRi
ElF3N3WGyiFsROQCmtG6Da0T5ZD8bhYC8zUwjqNyEtwSCrzB6e8Zi61ZBeSn5vMV
QIq/KiKBcWc=
=Ey6I
-----END PGP SIGNATURE-----
-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
