.\" Copyright (c) 2000-2003 QoSient, LLC
.\" All rights reserved.
.\"
.\" QOSIENT, LLC DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS
.\" SOFTWARE, INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND
.\" FITNESS, IN NO EVENT SHALL QOSIENT, LLC BE LIABLE FOR ANY
.\" SPECIAL, INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER
.\" RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF
.\" CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
.\" CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
.\"
.\"
.TH RAMON 1 "07 November 2000"
.SH NAME
\fBramon\fP \- provide RMON2 style reports from \fBargus(8)\fP data.
.SH COPYRIGHT
Copyright (c) 2000-2003 QoSient. All rights reserved.
.SH SYNOPSIS
.B ramon
[ra-options]
.B -M (TopN | Matrix | HostProto | HostSvc | Svc) [-M Net/masklen] 
[
.I expression
]
.SH DESCRIPTION
.IX  "ramon command"  ""  "\fLramon\fP \(em argus data"
.LP
.B Ramon
reads
.BR argus(8)
data from an \fIargus data\fP source, aggregates the records, sorts them
based on user supplied criteria  and generates modified argus data that
supports RMON2 style tables and data reporting.

.B Ramon
supports the same sorting capabilites and calling syntax as
.B rasort()
for specifying the sorting algorithm and order.

The output is valid argus data, and can be operated on using any ra*() program.

Like all ra based clients, 
.B ramon 
supports a large number of options, configuration through .rarc
files, and input filtering using the terminating filter
\fIexpression\fP.
.LP
See the \fBra(1)\fP man page for details on \fIra-options\fP and
\fIexpression\fP syntax.

.LP
.SH RAMON SPECIFIC OPTIONS
.TP 5 5
.B \-M TopN
Generate the top N list of network addresses and supply the incoming
and outgoing packet and bytes counts.  The addresses can be modified
using the -M Net mode in addition to this mode.
.TP 5 5
.B \-M Matrix
Generate the list of talkers ( A <-> B) and supply the incoming and
outgoing packet and byte counts.  The talker addresses can be modified
using the -M Net mode.
.TP 5 5
.B \-M HostProto
Generate the list of protocols that are being used by each address
and supply the incoming and outgoing packet and byte counts seen.
.TP 5 5
.B \-M HostSvc
Generate the list of services that are being used by each address
and supply the incoming and outgoing packet and byte counts seen.
.TP 5 5
.B \-M Svc
Generate the list of services (dst port number) and supply the incoming
and outgoing packet and byte counts seen.
.TP 5 5
.B \-M Net[/masklen]
Track addresses as networks rather than host addresses.
If the option masklen is not provided, the addresses are
traced as subnets based on their Class network address.
.TP 5 5
.B \-a
Don't filter output to match expression filter.  This generates
the complete set of addresses/nets that contributed to the inbound
and outbound metrics.

.SH AUTHORS
.nf
Carter Bullard (carter@qosient.com).
.fi
.SH SEE ALSO
.BR ra (1),
.BR rasort (1),
.BR rarc (5),
.BR argus (8),