I assume it's a NetFlow/IPFIX/sFlow system, which is the only thing I've seen that would do that sort of thing. I've never tried such things on Internet traffic, most tools I've seen track host to host "conversations" which wouldn't scale well but tracking by AS IP ranges would be reasonable. It would be a neat addition to our toolbox. Dave Plonka and other folks over at the University of Wisconsin have done a lot of cool things over the years. http://www.eng.wiscnet.net/stats/ https://stats.net.wisc.edu/ http://net.doit.wisc.edu/~plonka/ Anthony Anderberg Sr. Systems Analyst 320-234-5239 anthonyanderberg@nu-telecom.net ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1