CUFlow - a module for FlowScan and an accompanying graphing cgi by Johan Andersen and Matt Selsky January 2006 SYNOPSIS To execute CUFlow properly, type: flowscan CUFlow OVERVIEW: CUFlow.pm is a FlowScan (http://net.doit.wisc.edu/~plonka/FlowScan/) module designed to combine the features of CampusIO and SubNetIO as we needed them and also hopefully process data more quickly. CUFlow allows you to differentiate traffic by protocol, service, TOS, router, and network and then generate TopN reports over 5 minutes periods and over an extended period of time. CUGrapher is the companion graphing tool and is designed as a CGI which generates images on the fly based on user input with data supplied by CUFlow. INSTALLATION AND EXECUTION: Follow the instructions for installing FlowScan (http://net.doit.wisc.edu/~plonka/FlowScan/INSTALL.html) If you are only using CUFlow and not the other modules distributed with FlowScan then you probably don't need to install ksh and the Boulder and ConfigReader Perl modules. CUFlow.pm and CUFlow.cf should be placed in the $flowscan_home/bin directory along with the other modules. To use CUFlow add it to the Report section of flowscan.cf and fire up flowscan. For more detailed information on the format of CUFlow.cf see the perldoc documentation. CUGrapher.pl should be placed in your cgi-bin and the Local Settings section should be checked to make sure the values make sense for your site. You will most certainly need to change $rrddir and $organization. The other settings should be reasonable defaults and should be self-explanatory. KNOWN ISSUES: If you are not using a Cisco Catalyst 6509, you will want to uncomment lines 495 and 496. These lines deal with the fact that the 6509 doesn't fill out the NextHop and OutputInterface fields in the NetFlow records sent from the PFC. MAILING LISTS: There is a mailing list having to do with CUFlow: * cuflow-users: a general mailing list for CUFlow users. The list's archives are available at: https://www1.columbia.edu/sec/bboard/mj/cuflow-users/ This list is hosted by the Academic Information Systems department at Columbia University. To subscribe to the list, send email to: majordomo@columbia.edu containing: subscribe cuflow-users You should receive an automatic response that will request that you verify your request to become a member of the list, to which you must reply with the authentication information there-in. Then, in response to your reply, you should receive a welcome message. If you have any questions about the administrative policies of this list's manager, please contact: owner-cuflow-users@columbia.edu