Subject: Re: Adding services to io_services
From: Robert Lowe (robert.h.lowe@lawrence.edu)
Date: Tue Mar 06 2001 - 15:49:48 CST
Dave Plonka wrote: > > On Fri, Mar 02, 2001 at 04:33:09AM -0500, Jeffrey Meltzer wrote: > > Are there any rules to follow to add services to the io_services graphs? > > I have about 20% of traffic that falls under "Other", > > There's a scarcely-documented feature of CampusIO that if you create a > directory called "saved/other", CampusIO will begin to write all the > "Other" flows into raw flow files in that directory. > > The point of this feature is so that you can then use "flowdumper -s" > to see what sorts of things aren't being caught and hopefully improve > "CampusIO.cf" or "CampusIO.pm" so that it can identify those things (if > possible). I used this some time ago to help me identify some of my "other" traffic, which presently amounts to ~58% of my outbound and ~50% of my inbound traffic. A significant amount appeared to be Gnutella-related (port 6346, in particular), but ports 8888 and 6699 also showed up, which I'm fairly certain (especially 6699) are Napster. Do, or can, the current Napster rules reflect traffic related to client pushes, rather than just pulls?? In addition to the other percentages, flowscan identifies 39% of my outbound traffic as Napster. -Robert -- Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body Unsubscribe mailto:majordomo@net.doit.wisc.edu and say "unsubscribe flowscan" in message body Archive http://net.doit.wisc.edu/~plonka/list/flowscan/archive/
This archive was generated by hypermail 2b25 : Tue Mar 06 2001 - 15:50:26 CST