Mikulas · July 28, 2017 07:35
diff --git a/aws-vpc-flow-log-external-outliers.sql b/aws-vpc-flow-log-external-outliers.sql
 SELECT dstaddr, sum(bytes)
 FROM vpc
 WHERE srcaddr << '172.31.0.0/16'
  AND external=1
 GROUP BY dstaddr
 ORDER BY 2 desc;
	SELECT dstaddr, sum(bytes)
	FROM vpc
	WHERE srcaddr << '172.31.0.0/16'
	AND external=1
	GROUP BY dstaddr
	ORDER BY 2 desc;