[Flow-tools] Presents (modified FlowScan & JKGrapher)

[Michael Graziano]

All -

As my previous mail was a bit too large for the list, I'm offering our
JKGrapher and FlowScan diffs to anyone who asks (contact me off-list for
faster response since I'm just getting digests).

The diffs are against FlowScan.pm 1.5 and JKFlow-v3.5.2 -- FlowScan.pm
got away relatively unscathed, but the JKGrapher.pl diff is about 35kb
(Lots of changes).

The changes facilitate the following nifty new features:
-> 95th percentile lines on graphs
-> Confidence Intervals on graphs (based on the HWPREDICT code in
RRDTool)
-> Abnormal Traffic Detection (Also based on HWPREDICT, see link for
some details)
 
http://www.usenix.org/events/lisa2000/full_papers/brutlag/brutlag_html/i
ndex.html
   (Model values tweaked based on my company, Your values may vary)


These changes have been tested and found to play nice with rrdtool
1.2.23 & flow-tools 0.68.

-MG