On Wed, Sep 17, 2008 at 09:06:04PM +0000, Stuart Henderson wrote:
I'm being a tease again:
nfdb=# SELECT sum(flow_packets) AS packets, sum(flow_octets) AS bytes,
dst_addr AS server
FROM flows_current where dst_addr <<= '66.205.209.0/24'
AND protocol=6
AND "timestamp" > now() - interval '1 week'
GROUP BY dst_addr
ORDER BY bytes DESC LIMIT 10;
packets | bytes | server
---------+------------+----------------
9149276 | 6102457003 | 66.205.209.31
5439809 | 5614875206 | 66.205.209.15
5760540 | 3762630650 | 66.205.209.16
461723 | 297503707 | 66.205.209.12
268520 | 154822480 | 66.205.209.14
102066 | 65937949 | 66.205.209.58
71905 | 64167244 | 66.205.209.252
949452 | 58012301 | 66.205.209.60
65539 | 45630979 | 66.205.209.105
60786 | 42647988 | 66.205.209.106
(10 rows)
--
Jason Dixon
DixonGroup Consulting
http://www.dixongroup.net/