Hi Peter et al, I am trying to set alerts similar to the following:
packets/s > 10 minute average + 30% AND flows/s INSIDE 10 minute average + 5% The reason (probably obvious) is that I want to alert where I see a pps spike where there is not a corresponding significant increase in flows/s (like a DoS). However, it appears that the available options are greater-than, less-than, or outside. Depending on which of these you select, the + or - changes. Would it be possible to add the ability to check that (eg) the number of flows has not increased above a particular amount (or below a particular amount), etc? I've had a look around and I can't find reference to this, so perhaps it is a feature request :) Many thanks Ivan P.S. There is a minor typo where "packages/s" is selectable, rather than "packets/s". -- Ivan Beveridge VP Operations, LiveJournal e: <[email protected]> ; w: http://livejournal.com/ ------------------------------------------------------------------------------ _______________________________________________ Nfsen-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
