NAME¶
ragraph - graph
argus(8) data.
COPYRIGHT¶
Copyright (c) 2000-2003 QoSient. All rights reserved.
SYNOPSIS¶
ragraph metric [object] [
-M mode] [
options]
[
raoptions]
DESCRIPTION¶
Ragraph reads
argus(8) data from an
argus-file, and graphs
fields of interest from matching argus flow activity records. Current,
ragraph uses rrd-tool to generate GIF formatted graphs, and so many
options to rrd-tool are supported by ragraph.
Ragraph supports graphing most
metrics that are available in argus
data. The list includes bytes, sbytes, dbytes, pkts, spkts, dpkts, trans, dur,
avgdur.
Ragraph also supports graphing based on multiple
objects, such as
the destination address or destination port values. The list currently include
saddr, daddr, proto, sport, dport.
By default
ragraph writes its output to ragraph.gif, in the current
directory. Use the '-w' raoption to specify an alternate output filename.
OPTIONS¶
- -M <mode> -
- Specify the mode for printing. Current ragraph supports any
arbitrary time range as a mode, specified either as a number followed by
the time scale seconds(s), minutes(m), hours(h), days(d), months(M),
years(y), or as a type of time, such as hourly, daily, etc. Examles are:
-M 1s graph bins of size 1 second.
-M 15m graph bins of size 15 minutes.
-M hourly graph bins of size 1 hour.
-M daily graph bins of size 1 day.
- -log
- Use logarithmic scale for y-axis.
- -fill
- Turn off area fill.
- -stack
- Turn off data stacking.
- -split
- Turn off axis splitting for src/dst(in/out) traffic.
- -height
- Specify height in pixels for the graph (275 pixels)
- -width
- Specify width in pixels for the graph (800 pixels)
- -upper
- Specify upper bounds for graphing data (automatic).
- -lower
- Specify lower bounds for graphing data (automatic). When data is split,
you need to specify the value as a negative number.
- -title
- Specify a graph title.
RA OPTIONS¶
Ragraph, like all ra based clients, supports a number of
ra options
including filtering of input argus records through a terminating filter
expression, and specifying an output filename using the -w option.
See
ra(1) for a complete description of
ra options.
EXAMPLES¶
To graph the total load for the data in an
argus-file argus.data at 10
second intervals:
ragraph bytes -M 10s -r argus.data -title "Total Load"
To graph the rate (pkt/sec) on a destination port basis for the data from a
specific probe in an
argus-file argus.data at 1 minute intervals:
ragraph pkts dport -M 1m -r argus.data - srcid 192.168.0.10
AUTHORS¶
Carter Bullard (carter@qosient.com).
SEE ALSO¶
ragraph(5),
ra(1),
rarc(5),
argus(8)
tcpdump(1),