1RAMON(1)                    General Commands Manual                   RAMON(1)
2
3
4

NAME

6       ramon - provide RMON2 style reports from argus(8) data.
7

9       Copyright (c) 2000-2003 QoSient. All rights reserved.
10

SYNOPSIS

12       ramon  [ra-options]  -M (TopN | Matrix | HostProto | HostSvc | Svc) [-M
13       Net/masklen] [ expression ]
14

DESCRIPTION

16       Ramon reads argus(8) data from an argus  data  source,  aggregates  the
17       records, sorts them based on user supplied criteria  and generates mod‐
18       ified argus data that supports RMON2 style tables and data reporting.
19
20       Ramon supports the same  sorting  capabilites  and  calling  syntax  as
21       rasort() for specifying the sorting algorithm and order.
22
23       The  output is valid argus data, and can be operated on using any ra*()
24       program.
25
26       Like all ra based clients, ramon supports a large  number  of  options,
27       configuration through .rarc files, and input filtering using the termi‐
28       nating filter expression.
29
30       See the ra(1) man page for details on ra-options and expression syntax.
31
32

RAMON SPECIFIC OPTIONS

34       -M TopN
35            Generate the top N list of network addresses and supply the incom‐
36            ing  and  outgoing  packet and bytes counts.  The addresses can be
37            modified using the -M Net mode in addition to this mode.
38
39       -M Matrix
40            Generate the list of talkers ( A <-> B) and  supply  the  incoming
41            and  outgoing packet and byte counts.  The talker addresses can be
42            modified using the -M Net mode.
43
44       -M HostProto
45            Generate the list of protocols that are being used by each address
46            and supply the incoming and outgoing packet and byte counts seen.
47
48       -M HostSvc
49            Generate  the list of services that are being used by each address
50            and supply the incoming and outgoing packet and byte counts seen.
51
52       -M Svc
53            Generate the list of services (dst port  number)  and  supply  the
54            incoming and outgoing packet and byte counts seen.
55
56       -M Net[/masklen]
57            Track  addresses  as  networks rather than host addresses.  If the
58            option masklen is not provided, the addresses are traced  as  sub‐
59            nets based on their Class network address.
60
61       -a   Don't  filter  output  to match expression filter.  This generates
62            the complete set of addresses/nets that contributed to the inbound
63            and outbound metrics.
64
65

AUTHORS

67       Carter Bullard (carter@qosient.com).
68

SEE ALSO

70       ra(1), rasort(1), rarc(5), argus(8),
71
72
73
74                               07 November 2000                       RAMON(1)
Impressum