NAME

       ragraph - graph argus(8) data.

COPYRIGHT

       Copyright (c) 2000-2003 QoSient. All rights reserved.

SYNOPSIS

       ragraph metric [object] [-M mode] [options] [raoptions]

DESCRIPTION

       Ragraph  reads  argus(8)  data  from  an  argus-file,  and  graphs fields of interest from
       matching argus flow activity records.  Current, ragraph  uses  rrd-tool  to  generate  GIF
       formatted graphs, and so many options to rrd-tool are supported by ragraph.

       Ragraph supports graphing most metrics that are available in argus data. The list includes
       bytes, sbytes, dbytes, pkts, spkts, dpkts, trans, dur, avgdur.

       Ragraph also supports graphing based on multiple objects, such as the destination  address
       or destination port values.  The list currently include saddr, daddr, proto, sport, dport.

       By  default  ragraph  writes its output to ragraph.gif, in the current directory.  Use the
       '-w' raoption to specify an alternate output filename.

OPTIONS

       -M <mode> -
           Specify the mode for printing. Current ragraph supports any arbitrary time range as  a
           mode,  specified either as a number followed by the time scale seconds(s), minutes(m),
           hours(h), days(d), months(M), years(y), or as a type of time, such as  hourly,  daily,
           etc.  Examles are:
              -M 1s      graph bins of size 1 second.
              -M 15m     graph bins of size 15 minutes.
              -M hourly  graph bins of size 1 hour.
              -M daily   graph bins of size 1 day.

       -log
           Use logarithmic scale for y-axis.

       -fill
           Turn off area fill.

       -stack
           Turn off data stacking.

       -split
           Turn off axis splitting for src/dst(in/out) traffic.

       -height
           Specify height in pixels for the graph (275 pixels)

       -width
           Specify width in pixels for the graph (800 pixels)

       -upper
           Specify upper bounds for graphing data (automatic).

       -lower
           Specify  lower  bounds for graphing data (automatic).  When data is split, you need to
           specify the value as a negative number.

       -title
           Specify a graph title.

RA OPTIONS

       Ragraph, like all ra based clients, supports a number of ra options including filtering of
       input  argus  records  through  a  terminating filter expression, and specifying an output
       filename using the -w option.

       See ra(1) for a complete description of ra options.

EXAMPLES

       To graph the total load for the data in an argus-file argus.data at 10 second intervals:
              ragraph bytes -M 10s -r argus.data -title "Total Load"

       To graph the rate (pkt/sec) on a destination port basis for the data from a specific probe
       in an argus-file argus.data at 1 minute intervals:
              ragraph pkts dport -M 1m -r argus.data - srcid 192.168.0.10

AUTHORS

       Carter Bullard (carter@qosient.com).

SEE ALSO

       ragraph(5), ra(1), rarc(5), argus(8) tcpdump(1),

                                           21 July 2001                                RAGRAPH(1)