nice clickhouse sql queries

h4sh5 · Nov 5, 2020 · f37b38f · f37b38f
1 parent d34eaad
commit f37b38f
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/nice_queries.sql b/nice_queries.sql
@@ -0,0 +1,8 @@
+-- top 15 popular src IPs
+select IPv4NumToString(SrcAddr), count(*) as c from nflow group by IPv4NumToString(SrcAddr) order by c desc limit 15
+
+-- top 15 popular dst IPs
+select IPv4NumToString(DstAddr), count(*) as c from nflow group by IPv4NumToString(DstAddr) order by c desc limit 15
+
+-- top 15 popular dst ports
+select DstPort, count(*) as c from nflow group by DstPort order by c desc limit 15