artsportmagg

artsportmagg(l)                                                artsportmagg(l)



NAME
       artsportmagg - utility to aggregate port matrix objects in time domain

SYNOPSIS
       artsportmagg [-v] [-l topN] [-s portlist] [-i ifIndexList]
                    [-I ifIndexList] [-h hours] [-o] [-q]
                    outfile infile(s)

DESCRIPTION
       artsportmagg is a utility that reads port matrix objects from ARTS
       files (infile(s)) and aggregates them in the time domain, placing the
       resulting port matrix object(s) or selected port table object(s) into
       an output file (outfile).

OPTIONS
       -v     The -v option causes artsportmagg to print version information
              and exit immediately.

       -s portlist
              The -s portlist option is used to select a set of ports to be
              placed in ArtsSelectedPortTable objects in the output file.  In
              other words, instead of writing port matrix objects, we write
              selected port table objects.  A selected port table object does
              not retain the source to destination port information, but
              instead lumps traffic into the lower of the source or
              destination port for ports in portlist and lumps those that
              aren't in portlist into the input counters for port 0.

              portlist may contain hyphens (indicating an inclusive range) or
              commas.  For example, -s 1-1024,6000,7070 would select ports 1
              through 1024 (inclusive), port 6000 and port 7070.  All traffic
              for ports outside of these values would be lumped into counters
              for port 0.

       -i ifIndexList
              The -i ifIndexList option may be used to select only data which
              contains an interface index attribute in ifIndexList.  In other
              words, the -i ifIndexList option lets you select data from
              particular interfaces or sets of interfaces.  ifIndexList may
              contain hyphens (indicating an inclusive range) and commas.  For
              example, -i 1,2,5-8 would select data with an interface index
              attribute of 1, 2, 5, 6, 7 or 8.

       -I ifIndexList
              The -I ifIndexList option may be used to combine data which
              contains an interface index attribute in ifIndexList.  In other
              words, the -I ifIndexList option lets you aggregate data across
              a set of interfaces.  ifIndexList may contain hyphens
              (indicating an inclusive range) and commas.  For example, -I
              1,2,5-8 would combine all data with an interface index attribute
              of 1, 2, 5, 6, 7 or 8.  The resulting aggregate objects will
              contain an interface index attribute of 0.

       -h hours
              The -h hours option may be used to specify the period of
              aggregation, in hours.  The hours argument accepts a decimal
              value to permit aggregation by fractional hour values.  When the
              -h hours option is not used, artsportmagg will write a single
              port matrix object for the entire time interval seen in
              infile(s) to outfile.

       -l topN
              The -l topN option may be used to cause artsportmagg to generate
              selected port table objects based on the amount of traffic (in
              bytes) for eac port.  The top topN ports (by bytes of traffic)
              will have their own entries in the resulting selected port table
              objects, and all other ports will be lumped into the entry for
              port 0.

       -o     By default, artsportmagg appends to the output file, so you may
              accumlate aggregate port matrix objects in a single file over
              multiple invocations of artsportmagg.  You may override this
              behavior with the -o option.  This will cause artsportmagg to
              overwrite the output file instead of appending to it.

       -q     By default, artsportmagg prints a '.' for each port matrix
              object it reads and prints a '+' for each object it writes.  You
              may suppress this behavior with the -q (quiet) option.

EXAMPLES
       artsportmagg -h 1.0 /tmp/portmagg1hr.19980821 arts.19980821

SEE ALSO
       artsportms(l), artsportagg(l), artsports(l), artsdump(l), artsases(l),
       artsasagg(l), artsnets(l), artsnetagg(l), artsprotoagg(l),
       artsprotos(l), artstoc(l), jcdstasbar(l), jcsrcasbar(l)

ACKNOWLEDGEMENTS
       artsportagg and documentation written by Daniel W. McRobb
       CAIDA, August 1998




                                     LOCAL                     artsportmagg(l)