mindrot.org projects weblog
Sun, 26 Feb 2006
Using the new Python API in flowd-0.9, it is very easy to write custom
processing applications. Here are the results of a couple of hours of
figuring out
RRDtool's
subleties: a small pair of
scripts
to chart NetFlow data (example
results).
Details on how to use these scripts are contained in this
mailing list post.
The scripts currently summarise traffic by IP protocol, but this approach can
be extended to plotting any pretty much any classification of traffic - reports
by IP address, or by [IP address + TCP port] are easy to realise too.
posted at: 12:00 | permanent link