RAGRAPH(1)						      General Commands Manual							RAGRAPH(1)

NAME

       ragraph - graph argus(8) data.

COPYRIGHT

       Copyright (c) 2000-2003 QoSient. All rights reserved.

SYNOPSIS

       ragraph metric [object] [-M mode] [options] [raoptions]

DESCRIPTION

       Ragraph	reads argus(8) data from an argus-file, and graphs fields of interest from matching argus flow activity records.  Current, ragraph
       uses rrd-tool to generate GIF formatted graphs, and so many options to rrd-tool are supported by ragraph.

       Ragraph supports graphing most metrics that are available in argus data. The list includes  bytes,  sbytes,  dbytes,  pkts,  spkts,  dpkts,
       trans, dur, avgdur.

       Ragraph	also  supports graphing based on multiple objects, such as the destination address or destination port values.	The list currently
       include saddr, daddr, proto, sport, dport.

       By default ragraph writes its output to ragraph.gif, in the current directory.  Use the '-w' raoption to specify an alternate output  file-
       name.

OPTIONS

       -M <mode> -
	   Specify  the  mode  for printing. Current ragraph supports any arbitrary time range as a mode, specified either as a number followed by
	   the time scale seconds(s), minutes(m), hours(h), days(d), months(M), years(y), or as a type of time, such as hourly, daily, etc.  Exam-
	   les are:
	      -M 1s	 graph bins of size 1 second.
	      -M 15m	 graph bins of size 15 minutes.
	      -M hourly  graph bins of size 1 hour.
	      -M daily	 graph bins of size 1 day.

       -log
	   Use logarithmic scale for y-axis.

       -fill
	   Turn off area fill.

       -stack
	   Turn off data stacking.

       -split
	   Turn off axis splitting for src/dst(in/out) traffic.

       -height
	   Specify height in pixels for the graph (275 pixels)

       -width
	   Specify width in pixels for the graph (800 pixels)

       -upper
	   Specify upper bounds for graphing data (automatic).

       -lower
	   Specify lower bounds for graphing data (automatic).	When data is split, you need to specify the value as a negative number.

       -title
	   Specify a graph title.

RA OPTIONS

       Ragraph, like all ra based clients, supports a number of ra options including filtering of input argus records through a terminating filter
       expression, and specifying an output filename using the -w option.

       See ra(1) for a complete description of ra options.

EXAMPLES

       To graph the total load for the data in an argus-file argus.data at 10 second intervals:
	      ragraph bytes -M 10s -r argus.data -title "Total Load"

       To graph the rate (pkt/sec) on a destination port basis for the data from a specific probe in an argus-file argus.data at 1  minute  inter-
       vals:
	      ragraph pkts dport -M 1m -r argus.data - srcid 192.168.0.10

AUTHORS

       Carter Bullard (carter@qosient.com).

SEE ALSO

       ragraph(5), ra(1), rarc(5), argus(8) tcpdump(1),

								   21 July 2001 							RAGRAPH(1)