Paulo You're a legend, thanks. Works like a charm.
I assume to have the mac addresses of the clients captured for double analysis I can mod the filter like so: aggregate[in]: dst_host,src_port, dst_mac aggregate[out]: src_host,dst_port, src_mac Will test it right now. Thanks again. On 9/7/05, Paolo Lucente <[EMAIL PROTECTED]> wrote: > Hello Kenneth, > > [ ... ] > > > aggregate[in]: dst_host > > aggregate[out]: src_host > > aggregate_filter[in]: dst net 192.168.250.0/23 > > aggregate_filter[out]: src net 192.168.250.0/23 > > [ ... ] > > > I get the usage per host, but not per port as I also require. > > > > Any help would be really appreciated. > > You are missing either 'src_port' or 'dst_port' primitives into the > 'aggregate' directive. If the above IP are just clients, you can do > the job by modifying the statements as follow: > > aggregate[in]: dst_host,src_port > aggregate[out]: src_host,dst_port > aggregate_filter[in]: dst net 192.168.250.0/23 > aggregate_filter[out]: src net 192.168.250.0/23 > > You will be able to catch which ports are mostly used by your clients. > > Cheers, > Paolo > > > > ---------------------------------------------------------------- > This message was sent using IMP, the Internet Messaging Program. > _______________________________________________ > pmacct-discussion mailing list > [email protected] > http://muffin.area.ba.cnr.it/mailman/listinfo/pmacct-discussion > -- Kenneth Kalmer [EMAIL PROTECTED] [EMAIL PROTECTED] stats http://vspx27.stanford.edu/cgi-bin/main.py?qtype=userpage&username=kenneth%2Ekalmer
