[netsa-tools-discuss] alernate use of rwstats --percentage

[Evgeniy Sudyr]

Ai,

are you sure  that in your rwfilter results you have more than 1% of Bytes?

>From rwstats man page:

*--percentage*=*N* Print the bins where the primary value is greater-than
(or less-than) *N* percent of the sum of the primary values across all
bins.


I think it will be useful to see --count --Packets


On Tue, Sep 15, 2015 at 5:31 PM, asad <a.alii85 at gmail.com> wrote:

> Hi,
>
> I want to know what "alternate options" exists for following:-
>
> rwfilter --sensor=Vrouter1 --type=out --sport=3306 --pass=stdout
> --start-date=2012/11/13:00 --end-date=2012/11/13:23
> --saddress=172.31.253.102 | rwstats --percentage=1 --bytes --fields=dip
>
> I don't know why but using --percentage=1 flag, I get zero results, even
> when in records I know this IP is present. Is there any reason why would
> such happpen?
>
> Or I can move to another rwstats switch parameters to perform same task as
> trying to achieve with percentage=1
>
> Thanks.
>
>
>


-- 
--
With regards,
Eugene Sudyr
-------------- next part --------------
HTML attachment scrubbed and removed