What's up with the manager of bytecounters
Amos Shapira
Does anyone know who/what manages the bytecounters mailing list? It
used to be edited by hand but a few months ago I recieved (and I
suppose everyone else on the list did) a message from
ne...@data.interserv.net which says it is a local message to their news
server. Does this have anything to do with the management of this
list?
Any info will be appreciated,
Cheers,
--Amos
--Amos Shapira | "Of course Australia was marked for
133 Shlomo Ben-Yosef st. | glory, for its people had been chosen
Jerusalem 93 805 | by the finest judges in England."
ISRAEL am...@cs.huji.ac.il | -- Anonymous
bra...@isi.edu
WHAT??
I set up the bytecounters list here at ISI lo these many years ago,
when NNStat was first born, and we still maintain it here at ISI.
I don't understand the nature of the message you received.
Bob Braden
*> From am...@cs.huji.ac.il Tue Jun 27 23:25:42 1995
*> To: byteco...@ISI.EDU
*> Subject: What's up with the manager of bytecounters
*> From: Amos Shapira <am...@cs.huji.ac.il>
*> Date: Wed, 28 Jun 1995 08:50:54 +0300
*> Sender: am...@CS.HUJI.AC.IL
*> Content-Length: 684
*> X-Lines: 19
*>
*> Hello,
*>
*> Does anyone know who/what manages the bytecounters mailing list? It
*> used to be edited by hand but a few months ago I recieved (and I
*> suppose everyone else on the list did) a message from
*> ne...@data.interserv.net which says it is a local message to their news
*> server. Does this have anything to do with the management of this
*> list?
*>
*> Any info will be appreciated,
*>
*> Cheers,
*>
*> --Amos
*>
*> --Amos Shapira | "Of course Australia was marked for
*> 133 Shlomo Ben-Yosef st. | glory, for its people had been chosen
*> Jerusalem 93 805 | by the finest judges in England."
*> ISRAEL am...@cs.huji.ac.il | -- Anonymous
*>
Paul Hyder
>> become a list for general discussion of measurement and accounting,
>> and therefore I chose a general name (I must admit I thought
>> "bytecounters" was sort of cute). But that didn't happen. I
>> guess the name should have been stat...@isi.edu.
>>
>> Bob Braden
Or perhaps it is time to get the discussion going again! I have
fond memories of the "early days" of the list and the information
presented. Saved my skin (and other body parts) a number of times.
I don't know about anyone else but monitoring and stats are getting
to be a nightmare. Some type of discussion of how others are
meeting this need would be helpful. [And if there is another place
to look for this type of discussion PLEASE post it!]
Paul {I've been on the list for what seems to be forever} Hyder
NCAR
Amos Shapira
|As an aside, when I set up the bytecounters list, I hoped it would
|become a list for general discussion of measurement and accounting,
|and therefore I chose a general name (I must admit I thought
|"bytecounters" was sort of cute). But that didn't happen. I
|guess the name should have been stat...@isi.edu.
I'll vote for the original idea too. Maybe one of the problems is
that many people who would use this list aren't aware of it.
For a start - has anyone here got experience with other network
statistics programs?
Cheers,
--Amos
--Amos Shapira | "Of course Australia was marked for
133 Shlomo Ben-Yosef st. | glory, for its people had been chosen
Jerusalem 93 805 | by the finest judges in England."
ISRAEL am...@cs.huji.ac.il | -- Anonymous
Lyn Little
> For a start - has anyone here got experience with other network
> statistics programs?
I'll bite on this one.
I use the NNStat data as a supplement to data from my cisco routers using
'ip accounting'. For those who don't know, ciscos can be configured to
record a source ip, destination ip, number of bytes, number of packets
matrix (and security violations with the latest software version). You can
then collect this data from the router regularly and post process it as
you like. I collect the data at less than three minute intervals. Originally
I used the processing software available on Cisco's ftp server, but we
are currently changing over to use expect scripts and have done a lot of
work on post processing to suit our management requirements.
The obvious limitation of the cisco data is that it only goes to the
level of source & destination ip. I find this enough for most of our needs,
as 80+ percent of my network is ip, and identifying top talking ip addresses
is often enough to determine the type of traffic (eg when the top talkers
are the wwwcache, news server, mailhost etc). Some other advantages of
this method are that data is available for traffic entering/leaving
every subnet, not just the ones you can afford to put an NNstat server on,
and because its post processed, we can decide after the event to analyse it
in different ways. It is also very useful when following up security
incidents, or for quickly identifying the source of excessive traffic.
NNstat supplements this by giving us sample data breaking up the traffic
by protocol (IP, DEC, IPX etc) and by port (WWW, IRC, news etc) and
following up problem areas in more detail.
Is anyone doing anything similar that might have some good tips to pass
on?
______________________________________________________________________________
Lyn Little E-Mail : Lyn.L...@anu.edu.au
Network Services
IT Services Phone : (06) 249 0542
Australian National University Fax : (06) 279 8199
Canberra, ACT 0200
______________________________________________________________________________
John Miezitis
> I'll bite on this one.
>
> I use the NNStat data as a supplement to data from my cisco routers using
> 'ip accounting'. For those who don't know, ciscos can be configured to
> record a source ip, destination ip, number of bytes, number of packets
> matrix (and security violations with the latest software version). You can
> then collect this data from the router regularly and post process it as
> you like. I collect the data at less than three minute intervals. Originally
> I used the processing software available on Cisco's ftp server, but we
> are currently changing over to use expect scripts and have done a lot of
> work on post processing to suit our management requirements.
I have written some Perl-Tricklet scripts to download the ip accounting
data using SNMP. I do this every 10 mins and on an IGS I see the CPU
usage jump from 10% to 60% every 10 mins. I would be concerned about
doing this kind of task frequently. Comments anyone?
Cheers.
JohnM.
John B Miezitis, University of Tasmania, Information Technology Services.
Intl Ph: +61 02 207414, Email: John.M...@its.utas.edu.au
Belgium man Belgium!!! - Z. Beeblebrox
_______________________________________________________________________________
Jeff Mcfarlin
true for a lot of what I want to do on our network here. Highly
recommended. Kudos to that Japanese dude (my brain is tired, sorry I
can't member his name) who ported it. With some goog Perl programs this
NNstat program really should come in handy.
jeff
NECAnet
On Fri, 30 Jun 1995, Lyn Little wrote:
>
> > For a start - has anyone here got experience with other network
> > statistics programs?
> > --Amos
>
> I'll bite on this one.
>
> I use the NNStat data as a supplement to data from my cisco routers using
> 'ip accounting'. For those who don't know, ciscos can be configured to
> record a source ip, destination ip, number of bytes, number of packets
> matrix (and security violations with the latest software version). You can
> then collect this data from the router regularly and post process it as
> you like. I collect the data at less than three minute intervals. Originally
> I used the processing software available on Cisco's ftp server, but we
> are currently changing over to use expect scripts and have done a lot of
> work on post processing to suit our management requirements.
>
Amos Shapira
:
|I just compiled NNstat for BSDi 2.0 today, and instantly saw a dream come
|true for a lot of what I want to do on our network here. Highly
|recommended. Kudos to that Japanese dude (my brain is tired, sorry I
|can't member his name) who ported it. With some goog Perl programs this
|NNstat program really should come in handy.
I've just put up a set of Perl scripts made available to me by Robert
Elz (k...@munnari.oz.au) at
ftp://ftp.huji.ac.il/users/amoss/NNStat/NNStat.pl.tar.gz (notice that
I created a new subdirectory dedicated for NNStat).
I haven't looked at them myself yet so I can't comment about them.