ipaggmanip

Manipulate IP aggregate files

$ ipaggmanip [input.agg]

$ ipaggmanip --merge [file1.agg] [file2.agg] > [combined.agg]

$ ipaggmanip --min-count=[100] [input.agg]

$ ipaggmanip --sort [input.agg]

$ ipaggmanip --output-format=[ascii] [input.agg]

ipaggmanip [options] [files]

ipaggmanip manipulates IP address aggregate files created by ipaggcreate. It can merge multiple aggregate files, filter by thresholds, re-aggregate with different parameters, and convert between formats.
This tool completes the ipsumdump suite's workflow for network traffic analysis: capture with ipsumdump, aggregate with ipaggcreate, and manipulate/analyze with ipaggmanip.

--merge

Merge multiple aggregate files

Sort output by count or address

Only output aggregates with at least N entries

Only output aggregates with at most N entries

Specify output format (ascii, binary)

Re-aggregate with different prefix length

Input files must be in the ipagg format produced by ipaggcreate. Merging files with incompatible aggregation parameters may produce unexpected results.

Part of the ipsumdump package developed by Eddie Kohler. Designed for large-scale network measurement research where traffic summarization and analysis across multiple data sources is required.

ipsumdump(1), ipaggcreate(1), tcpdump(1)