This tools reads a pcap file and outputs a set of features that are suited to be sent to an RRD file. It computes the features in time windows, so every X minutes you can have some values that help you visualize the traffic. By default the time window is 1 minute. The features computed by this tool are:
1- Amount of established DNS flows (DNS)
2- Amount of established flows to the destination port 25. (SPAM)
3- Amount of established flows to port 80. (WEB)
4- Amount of established flows to port 443. (HTTPS)
5- Amount of established flows to port 22. (SSH)
6- Amount of TCP flows.
7- Amount of UDP flows.
8- Amoount of IPv6 flows.
Garcia Sebastian. email@example.com