Mikulas · July 28, 2017 07:29
diff --git a/aws-vpc-flow-log-what-goes-out.sql b/aws-vpc-flow-log-what-goes-out.sql
 SELECT srcport, sum(bytes)
 FROM vpc
 WHERE srcaddr << '172.31.0.0/16' -- packets sent from our VPC CIDR
  AND external=1                 -- going outside the VPC
 GROUP BY srcport                 -- aggregated by your application ports
 ORDER BY 2 desc;
	SELECT srcport, sum(bytes)
	FROM vpc
	WHERE srcaddr << '172.31.0.0/16' -- packets sent from our VPC CIDR
	AND external=1 -- going outside the VPC
	GROUP BY srcport -- aggregated by your application ports
	ORDER BY 2 desc;