On 13/06/2014 17:01, Ge Moua wrote:
Maybe a combo of:
* cron
* nfdump <by time window>
* wrapped inside shell, awk, sed, perl, python, etc of choice

not the exact recipe but more so for what ingredients that can be used
Incredibly, someone asked me to do this today, so without any ado, I put the following in /etc/cron.daily/reports.sh

#!/bin/sh
YESTERDAY=`date -d "yesterday" +"%Y/%m/%d"`
DUMPFILE=`date -d "yesterday" +"%Y%m%d"`
OXCODE="XXYYY"
SUBNET="43"
RISM="[email protected]"
mkdir -p /opt/reporting/data/$OXCODE;
echo "Report for $OXCODE on $YESTERDAY" > /opt/reporting/data/$OXCODE/$DUMPFILE.txt
echo >> /opt/reporting/data/$OXCODE/$DUMPFILE.txt
echo "The following table shows upload top users, which can include servers" >> /opt/reporting/data/$OXCODE/$DUMPFILE.txt
echo >> /opt/reporting/data/$OXCODE/$DUMPFILE.txt
nfdump -M /usr/local/nfsen/profiles-data/live/asa5510/$YESTERDAY -R . -n 20 -s srcip/bytes "src net 192.168.$SUBNET.0/24" >> /opt/reporting/data/$OXCODE/$DUMPFILE.txt
echo >> /opt/reporting/data/$OXCODE/$DUMPFILE.txt
echo "The following table shows download top users, which can include servers" >> /opt/reporting/data/$OXCODE/$DUMPFILE.txt
echo >> /opt/reporting/data/$OXCODE/$DUMPFILE.txt
nfdump -M /usr/local/nfsen/profiles-data/live/asa5510/$YESTERDAY -R . -n 20 -s dstip/bytes "dst net 192.168.$SUBNET.0/24" >> /opt/reporting/data/$OXCODE/$DUMPFILE.txt mailx -s "$OXCODE Report for $YESTERDAY" -r "Networks <[email protected]>" $RISM < /opt/reporting/data/$OXCODE/$DUMPFILE.txt



Regards,
Ge Moua
University of Minnesota Alumnus
[email protected]
--

On 6/13/14, 10:55 AM, Scott Granados wrote:
Hi, I’m new to NFSEN so apologize if this has been asked before.
        I’ve been asked to generate weekly or daily reports of things like TOP 
AS, top IP addresses or subnets, etc.  It’s not obvious to me in the tool how 
to do this and in fact doesn’t seem possible natively.  I did some googling and 
found a reference to some scripts that could be run in CRON that would generate 
these reports and email them but the actual pointer to the tar file containing 
the scripts seemed broken.  Does anyone have a pointer to scripts that could be 
adjusted to fit this purpose or some suggestions on a starting point as to how 
I can automate some of the reporting?

Thank you
Scott


------------------------------------------------------------------------------
HPCC Systems Open Source Big Data Platform from LexisNexis Risk Solutions
Find What Matters Most in Your Big Data with HPCC Systems
Open Source. Fast. Scalable. Simple. Ideal for Dirty Data.
Leverages Graph Analysis for Fast Processing & Easy Data Exploration
http://p.sf.net/sfu/hpccsystems
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss

------------------------------------------------------------------------------
HPCC Systems Open Source Big Data Platform from LexisNexis Risk Solutions
Find What Matters Most in Your Big Data with HPCC Systems
Open Source. Fast. Scalable. Simple. Ideal for Dirty Data.
Leverages Graph Analysis for Fast Processing & Easy Data Exploration
http://p.sf.net/sfu/hpccsystems
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss


--
Regards,

Giles Coochey, CCNP, CCNA, CCNAS
NetSecSpec Ltd
+44 (0) 8444 780677
+44 (0) 7983 877438
http://www.coochey.net
http://www.netsecspec.co.uk
[email protected]


Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

------------------------------------------------------------------------------
HPCC Systems Open Source Big Data Platform from LexisNexis Risk Solutions
Find What Matters Most in Your Big Data with HPCC Systems
Open Source. Fast. Scalable. Simple. Ideal for Dirty Data.
Leverages Graph Analysis for Fast Processing & Easy Data Exploration
http://p.sf.net/sfu/hpccsystems
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss

Reply via email to