DragonFly On-Line Manual Pages
artsportmagg(l) artsportmagg(l)
NAME
artsportmagg - utility to aggregate port matrix objects in time domain
SYNOPSIS
artsportmagg [-v] [-l topN] [-s portlist] [-i ifIndexList]
[-I ifIndexList] [-h hours] [-o] [-q]
outfile infile(s)
DESCRIPTION
artsportmagg is a utility that reads port matrix objects from ARTS
files (infile(s)) and aggregates them in the time domain, placing the
resulting port matrix object(s) or selected port table object(s) into
an output file (outfile).
OPTIONS
-v The -v option causes artsportmagg to print version information
and exit immediately.
-s portlist
The -s portlist option is used to select a set of ports to be
placed in ArtsSelectedPortTable objects in the output file. In
other words, instead of writing port matrix objects, we write
selected port table objects. A selected port table object does
not retain the source to destination port information, but
instead lumps traffic into the lower of the source or
destination port for ports in portlist and lumps those that
aren't in portlist into the input counters for port 0.
portlist may contain hyphens (indicating an inclusive range) or
commas. For example, -s 1-1024,6000,7070 would select ports 1
through 1024 (inclusive), port 6000 and port 7070. All traffic
for ports outside of these values would be lumped into counters
for port 0.
-i ifIndexList
The -i ifIndexList option may be used to select only data which
contains an interface index attribute in ifIndexList. In other
words, the -i ifIndexList option lets you select data from
particular interfaces or sets of interfaces. ifIndexList may
contain hyphens (indicating an inclusive range) and commas. For
example, -i 1,2,5-8 would select data with an interface index
attribute of 1, 2, 5, 6, 7 or 8.
-I ifIndexList
The -I ifIndexList option may be used to combine data which
contains an interface index attribute in ifIndexList. In other
words, the -I ifIndexList option lets you aggregate data across
a set of interfaces. ifIndexList may contain hyphens
(indicating an inclusive range) and commas. For example, -I
1,2,5-8 would combine all data with an interface index attribute
of 1, 2, 5, 6, 7 or 8. The resulting aggregate objects will
contain an interface index attribute of 0.
-h hours
The -h hours option may be used to specify the period of
aggregation, in hours. The hours argument accepts a decimal
value to permit aggregation by fractional hour values. When the
-h hours option is not used, artsportmagg will write a single
port matrix object for the entire time interval seen in
infile(s) to outfile.
-l topN
The -l topN option may be used to cause artsportmagg to generate
selected port table objects based on the amount of traffic (in
bytes) for eac port. The top topN ports (by bytes of traffic)
will have their own entries in the resulting selected port table
objects, and all other ports will be lumped into the entry for
port 0.
-o By default, artsportmagg appends to the output file, so you may
accumlate aggregate port matrix objects in a single file over
multiple invocations of artsportmagg. You may override this
behavior with the -o option. This will cause artsportmagg to
overwrite the output file instead of appending to it.
-q By default, artsportmagg prints a '.' for each port matrix
object it reads and prints a '+' for each object it writes. You
may suppress this behavior with the -q (quiet) option.
EXAMPLES
artsportmagg -h 1.0 /tmp/portmagg1hr.19980821 arts.19980821
SEE ALSO
artsportms(l), artsportagg(l), artsports(l), artsdump(l), artsases(l),
artsasagg(l), artsnets(l), artsnetagg(l), artsprotoagg(l),
artsprotos(l), artstoc(l), jcdstasbar(l), jcsrcasbar(l)
ACKNOWLEDGEMENTS
artsportagg and documentation written by Daniel W. McRobb
CAIDA, August 1998
LOCAL artsportmagg(l)