flow-xlate – Apply translations to selected fields of a flow. Synopsisflow-xlate [ -hkn ] [ -b big|little ] [ -C comment ] [ -d debug_level ] [ -v variable binding ] [ -V flow_version ] [ -x xlate_fname ] [ -X xlate_definition ] [ -z z_level ] DescriptionThe flow-xlate utility is used to apply translations…
flow-tools – Tool set for working with NetFlow data. DescriptionFlow-tools is library and a collection of programs used to collect, send, process, and generate reports from NetFlow data. The tools can be used together on a single server or distributed to multiple servers for large deployments. The flow-toools library provides an API for development of…
flow-tools-examples – Example usage of flow-tools. Example – Configuring Cisco Ios RouterNetFlow is configured on each input interface, then global commands are used to specify the export destination. To ensure a consistant source address address Loopback0 is configured as the export source. ip cef distributed ip flow-export version 5 origin-as ip flow-export destination 10.0.0.100 5004…
flow-tag – Apply tags to flow files. Synopsisflow-tag [ -hk ] [ -b big|little ] [ -C comment ] [ -d debug_level ] [ -t tag_fname ] [ -T tag_definition ] [ -v variable binding ] DescriptionThe flow-tag utility is used to add or modify source and destination tags in flow records. Tags are 32…
flow-stat – Generate reports with flow data. Synopsisflow-stat [ -hnpPw ] [ -d debug_level ] [ -f format ] [ -S sort_field ] [ -s sort_field ] [ -t tally_lines ] [ -T title ] DescriptionThe flow-stat utility generates usage reports for flow data sets by IP address, IP address pairs, ports, packets, bytes, interfaces,…
flow-split – Split flow files into smaller files. Synopsisflow-split [ -gGhn ] [ -b big|little ] [ -C comment ] [ -d debug_level ] [ -N nflows ] [ -o outfile_basename ] [ -T nseconds ] [ -z z_level ] DescriptionThe flow-split utility will split a flow file into smaller files based on the the…
flow-send – Transmit flow data with the NetFlow protocol. Synopsisflow-send [ -h ] [ -d debug_level ] [ -m privacy_mask ] [ -s ] [ -x xmit_delay ] [ -V pdu_version ] localip/remoteip/port DescriptionThe flow-send utility is used to transmit flows in NetFlow format to a collector specified by localip/remoteip/port. Options-d debug_level Enable debugging. -h…
flow-rptfmt – Format the output of flow-report in ASCII or HTML Synopsisflow-rptfmt [ -hHnp ] [ -a alarm_time ] [ -f format ] [ -F fields ] [ -m max_lines ] [ -s sort_field ] DescriptionThe flow-rptfmt utility processes the CSV output of flow-report into formatted ASCII or HTML. Sorting, maximum display lines, field filter,…
flow-rpt2rrd – Convert flow-report CSV output to RRDtool format. Synopsisflow-rpt2rrd [ -nv ] [ -d debug_level ] [ -k keys ] [ -K keys_file ] [ -f fields ] [ -p rrd_path ] [ -P rrd_postfix ] [ -r rrd_storage ] DescriptionThe flow-rpt2rrd utility processes the CSV output of flow-report into RRDtool format. The aggregates…
flow-report – Generate reports from flow data. Synopsisflow-report [ -h ] [ -d debug_level ] [ -s stat_fname ] [ -S stat_definition ] [ -v variable binding ] DescriptionThe flow-report utility will generate reports from flow data. The reports are easy to parse ASCII text that can be used by a front end to produce…
flow-receive – Receive flow data with the NetFlow protocol. Synopsisflow-receive [ -h ] [ -b big|little ] [ -C comment ] [ -d debug_level ] [ -o output_file ] [ -S stat_interval ] [ -V pdu_version ] [ -z z_level ] localip/remoteip/port DescriptionThe flow-receive utility is used to receive flows in NetFlow format. When the…
flow-print – Display flows in formatted ASCII. Synopsisflow-print [ -hlnpw ] [ -d debug_level ] [ -f format ] DescriptionThe flow-print utility will display flow data in ASCII using pre-defined formats selectable with -f. Some of the less descriptive column headers are defined below Header Description ——————————- Sif Source Interface ifIndex. DiF Destination Interface ifIndex….
flow-nfilter – Filter flows. Synopsisflow-nfilter [ -hk ] [ -b big|little ] [ -C comment ] [ -d debug_level ] [ -f filter_fname ] [ -F filter_definition ] [ -v variable binding ] [ -z z_level ] DescriptionThe flow-nfilter utility will filter flows based on user selectable criteria. Filters are defined in a configuration file…
flow-merge – Merge flow files. Synopsisflow-merge [ -aghm ] [ -b big|little ] [ -C comment ] [ -d debug_level ] [ -o filename ] [ -z z_level ] [ file|directory… ] DescriptionThe flow-merge utility processes files and/or directories of files in the flow-tools format. The resulting merged data set is written to the standard…
flow-mask – Apply tags to flow files. Synopsisflow-mask [ -hk ] [ -b big|little ] [ -C comment ] [ -d debug_level ] [ -m mask_fname ] [ -M active_def… ] DescriptionThe flow-mask utility is used to modify the source and destination mask length’s in flow records. Options-b big|little Byte order of output. -C Comment…
flow-log2rrd – Process the STAT: lines from flow-capture andflow-fanout to RRD files. Synopsisflow-log2rrd [ -p rrd_path ] DescriptionThe flow-log2rrd utility processes the STAT lines generated by flow-capture and flow-fanout and converts them into RRD files. RRD’s are stored as rrd_path/capture|fanout.hostname.srcip.dstip.port.rrd. The Datastores are flows,pkts,lost representing flows, packets, and lost flows respectively. Flow-fanout generates an additional…
flow-import – Import flows into flow-tools from other NetFlow packages. Synopsisflow-import [ -h ] [ -b big|little ] [ -d debug_level ] [ -f format ] [ -m mask_fields ] [ -V pdu_version ] [ -z z_level ] DescriptionThe flow-import utility will convert data from cflowd and ASCII CSV files into flow-tools format. Options-b big|little…
flow-header – Display meta information in flow file. Synopsisflow-header [ -h ] [ -c comment_char ] [ -d debug_level ] DescriptionThe flow-header utility will display the flow meta information flow-tools uses internally. Options-c comment_char Field header. Defaults to # -d debug_level Turn on debugging. -h Display help.ExamplesDisplay the header information in flowfile flow-header < flowfile…
flow-gen – Generate test flows Synopsisflow-gen [ -h ] [ -b big|little ] [ -d debug_level ] [ -n count ] [ -V version ] [ -z z_level ] DescriptionThe flow-gen utility generates a test pattern of flows in any of the currently supported export versions typically for debugging purposes. Options-b big|little Byte order of…
flow-filter – Filter flows. Synopsisflow-filter [ -hko ] [ -a src_as_filter ] [ -A dst_as_filter ] [ -b big|little ] [ -C comment ] [ -D dstaddr_filter_name ] [ -d debug_level ] [ -e exaddr_filter ] [ -f acl_fname ] [ -i input_filter ] [ -I output_filter ] [ -p srcport_filter ] [ -P dstport_filter…