Linux and UNIX Man Pages

Linux & Unix Commands - Search Man Pages

ragraph(1) [debian man page]

RAGRAPH(1)						      General Commands Manual							RAGRAPH(1)

NAME
ragraph - graph argus(8) data. COPYRIGHT
Copyright (c) 2000-2003 QoSient. All rights reserved. SYNOPSIS
ragraph metric [object] [-M mode] [options] [raoptions] DESCRIPTION
Ragraph reads argus(8) data from an argus-file, and graphs fields of interest from matching argus flow activity records. Current, ragraph uses rrd-tool to generate GIF formatted graphs, and so many options to rrd-tool are supported by ragraph. Ragraph supports graphing most metrics that are available in argus data. The list includes bytes, sbytes, dbytes, pkts, spkts, dpkts, trans, dur, avgdur. Ragraph also supports graphing based on multiple objects, such as the destination address or destination port values. The list currently include saddr, daddr, proto, sport, dport. By default ragraph writes its output to ragraph.gif, in the current directory. Use the '-w' raoption to specify an alternate output file- name. OPTIONS
-M <mode> - Specify the mode for printing. Current ragraph supports any arbitrary time range as a mode, specified either as a number followed by the time scale seconds(s), minutes(m), hours(h), days(d), months(M), years(y), or as a type of time, such as hourly, daily, etc. Exam- les are: -M 1s graph bins of size 1 second. -M 15m graph bins of size 15 minutes. -M hourly graph bins of size 1 hour. -M daily graph bins of size 1 day. -log Use logarithmic scale for y-axis. -fill Turn off area fill. -stack Turn off data stacking. -split Turn off axis splitting for src/dst(in/out) traffic. -height Specify height in pixels for the graph (275 pixels) -width Specify width in pixels for the graph (800 pixels) -upper Specify upper bounds for graphing data (automatic). -lower Specify lower bounds for graphing data (automatic). When data is split, you need to specify the value as a negative number. -title Specify a graph title. RA OPTIONS
Ragraph, like all ra based clients, supports a number of ra options including filtering of input argus records through a terminating filter expression, and specifying an output filename using the -w option. See ra(1) for a complete description of ra options. EXAMPLES
To graph the total load for the data in an argus-file argus.data at 10 second intervals: ragraph bytes -M 10s -r argus.data -title "Total Load" To graph the rate (pkt/sec) on a destination port basis for the data from a specific probe in an argus-file argus.data at 1 minute inter- vals: ragraph pkts dport -M 1m -r argus.data - srcid 192.168.0.10 AUTHORS
Carter Bullard (carter@qosient.com). SEE ALSO
ragraph(5), ra(1), rarc(5), argus(8) tcpdump(1), 21 July 2001 RAGRAPH(1)

Check Out this Related Man Page

RAMON(1)						      General Commands Manual							  RAMON(1)

NAME
ramon - provide RMON2 style reports from argus(8) data. COPYRIGHT
Copyright (c) 2000-2003 QoSient. All rights reserved. SYNOPSIS
ramon [ra-options] -M (TopN | Matrix | HostProto | HostSvc | Svc) [-M Net/masklen] [ expression ] DESCRIPTION
Ramon reads argus(8) data from an argus data source, aggregates the records, sorts them based on user supplied criteria and generates mod- ified argus data that supports RMON2 style tables and data reporting. Ramon supports the same sorting capabilites and calling syntax as rasort() for specifying the sorting algorithm and order. The output is valid argus data, and can be operated on using any ra*() program. Like all ra based clients, ramon supports a large number of options, configuration through .rarc files, and input filtering using the ter- minating filter expression. See the ra(1) man page for details on ra-options and expression syntax. RAMON SPECIFIC OPTIONS
-M TopN Generate the top N list of network addresses and supply the incoming and outgoing packet and bytes counts. The addresses can be modi- fied using the -M Net mode in addition to this mode. -M Matrix Generate the list of talkers ( A <-> B) and supply the incoming and outgoing packet and byte counts. The talker addresses can be mod- ified using the -M Net mode. -M HostProto Generate the list of protocols that are being used by each address and supply the incoming and outgoing packet and byte counts seen. -M HostSvc Generate the list of services that are being used by each address and supply the incoming and outgoing packet and byte counts seen. -M Svc Generate the list of services (dst port number) and supply the incoming and outgoing packet and byte counts seen. -M Net[/masklen] Track addresses as networks rather than host addresses. If the option masklen is not provided, the addresses are traced as subnets based on their Class network address. -a Don't filter output to match expression filter. This generates the complete set of addresses/nets that contributed to the inbound and outbound metrics. AUTHORS
Carter Bullard (carter@qosient.com). SEE ALSO
ra(1), rasort(1), rarc(5), argus(8), 07 November 2000 RAMON(1)
Man Page