NAME flow-tag – Apply tags to flow files. SYNOPSIS flow-tag [ -hk ] [ -b big|little ] [ -C comment ] [ -d debug_level ] [ -t tag_fname ] [ -T tag_definition ] [ -v variable binding ] DESCRIPTION The flow-tag utility is used to add or modify source and destination tags in flow records….
NAME flow-stat – Generate reports with flow data. SYNOPSIS flow-stat [ -hnpPw ] [ -d debug_level ] [ -f format ] [ -S sort_field ] [ -s sort_field ] [ -t tally_lines ] [ -T title ] DESCRIPTION The flow-stat utility generates usage reports for flow data sets by IP address, IP address pairs, ports,…
NAME flow-split – Split flow files into smaller files. SYNOPSIS flow-split [ -gGhn ] [ -b big|little ] [ -C comment ] [ -d debug_level ] [ -N nflows ] [ -o outfile_basename ] [ -T nseconds ] [ -z z_level ] DESCRIPTION The flow-split utility will split a flow file into smaller files based…
NAME flow-send – Transmit flow data with the NetFlow protocol. SYNOPSIS flow-send [ -h ] [ -d debug_level ] [ -m privacy_mask ] [ -s ] [ -x xmit_delay ] [ -V pdu_version ] localip/remoteip/port DESCRIPTION The flow-send utility is used to transmit flows in NetFlow format to a collector specified by localip/remoteip/port. OPTIONS -d…
NAME flow-rptfmt – Format the output of flow-report in ASCII or HTML SYNOPSIS flow-rptfmt [ -hHnp ] [ -a alarm_time ] [ -f format ] [ -F fields ] [ -m max_lines ] [ -s sort_field ] DESCRIPTION The flow-rptfmt utility processes the CSV output of flow-report into formatted ASCII or HTML. Sorting, maximum display…
NAME flow-rpt2rrd – Convert flow-report CSV output to RRDtool format. SYNOPSIS flow-rpt2rrd [ -nv ] [ -d debug_level ] [ -k keys ] [ -K keys_file ] [ -f fields ] [ -p rrd_path ] [ -P rrd_postfix ] [ -r rrd_storage ] DESCRIPTION The flow-rpt2rrd utility processes the CSV output of flow-report into RRDtool…
NAME flow-report – Generate reports from flow data. SYNOPSIS flow-report [ -h ] [ -d debug_level ] [ -s stat_fname ] [ -S stat_definition ] [ -v variable binding ] DESCRIPTION The flow-report utility will generate reports from flow data. The reports are easy to parse ASCII text that can be used by a front…
NAME flow-receive – Receive flow data with the NetFlow protocol. SYNOPSIS flow-receive [ -h ] [ -b big|little ] [ -C comment ] [ -d debug_level ] [ -o output_file ] [ -S stat_interval ] [ -V pdu_version ] [ -z z_level ] localip/remoteip/port DESCRIPTION The flow-receive utility is used to receive flows in NetFlow…
NAME flow-print – Display flows in formatted ASCII. SYNOPSIS flow-print [ -hlnpw ] [ -d debug_level ] [ -f format ] DESCRIPTION The flow-print utility will display flow data in ASCII using pre-defined formats selectable with -f. Some of the less descriptive column headers are defined below Header Description ——————————- Sif Source Interface ifIndex. DiF…
NAME flow-nfilter – Filter flows. SYNOPSIS flow-nfilter [ -hk ] [ -b big|little ] [ -C comment ] [ -d debug_level ] [ -f filter_fname ] [ -F filter_definition ] [ -v variable binding ] [ -z z_level ] DESCRIPTION The flow-nfilter utility will filter flows based on user selectable criteria. Filters are defined in…
NAME flow-merge – Merge flow files. SYNOPSIS flow-merge [ -aghm ] [ -b big|little ] [ -C comment ] [ -d debug_level ] [ -o filename ] [ -z z_level ] [ file|directory… ] DESCRIPTION The flow-merge utility processes files and/or directories of files in the flow-tools format. The resulting merged data set is written…
NAME flow-mask – Apply tags to flow files. SYNOPSIS flow-mask [ -hk ] [ -b big|little ] [ -C comment ] [ -d debug_level ] [ -m mask_fname ] [ -M active_def… ] DESCRIPTION The flow-mask utility is used to modify the source and destination mask length’s in flow records. OPTIONS -b big|little Byte order…
NAME flow-log2rrd – Process the STAT: lines from flow-capture andflow-fanout to RRD files. SYNOPSIS flow-log2rrd [ -p rrd_path ] DESCRIPTION The flow-log2rrd utility processes the STAT lines generated by flow-capture and flow-fanout and converts them into RRD files. RRD’s are stored as rrd_path/capture|fanout.hostname.srcip.dstip.port.rrd. The Datastores are flows,pkts,lost representing flows, packets, and lost flows respectively. Flow-fanout…
NAME flow-import – Import flows into flow-tools from other NetFlow packages. SYNOPSIS flow-import [ -h ] [ -b big|little ] [ -d debug_level ] [ -f format ] [ -m mask_fields ] [ -V pdu_version ] [ -z z_level ] DESCRIPTION The flow-import utility will convert data from cflowd and ASCII CSV files into flow-tools…
NAME flow-header – Display meta information in flow file. SYNOPSIS flow-header [ -h ] [ -c comment_char ] [ -d debug_level ] DESCRIPTION The flow-header utility will display the flow meta information flow-tools uses internally. OPTIONS -c comment_char Field header. Defaults to # -d debug_level Turn on debugging. -h Display help. EXAMPLES Display the header…
NAME flow-gen – Generate test flows SYNOPSIS flow-gen [ -h ] [ -b big|little ] [ -d debug_level ] [ -n count ] [ -V version ] [ -z z_level ] DESCRIPTION The flow-gen utility generates a test pattern of flows in any of the currently supported export versions typically for debugging purposes. OPTIONS -b…
NAME flow-filter – Filter flows. SYNOPSIS flow-filter [ -hko ] [ -a src_as_filter ] [ -A dst_as_filter ] [ -b big|little ] [ -C comment ] [ -D dstaddr_filter_name ] [ -d debug_level ] [ -e exaddr_filter ] [ -f acl_fname ] [ -i input_filter ] [ -I output_filter ] [ -p srcport_filter ] […
NAME flow-fanout – Fanout (replicate) flow exports to many destinations. SYNOPSIS flow-fanout [ -h ] [ -A AS0_substitution ] [ -d debug_level ] [ -f filter_fname ] [ -F filter_definition ] [ -m privacy_mask ] [ -p pidfile ] [ -s ] [ -S stat_interval ] [ -V pdu_version ] [ -x xmit_delay ] localip/remoteip/port…
NAME flow-export – Export flow-tools files into other NetFlow packages. SYNOPSIS flow-export [ -h ] [ -d debug_level ] [ -f format ] [ -m mask_fields ] [ -u user:password:host:port:name:table ] DESCRIPTION The flow-export utility will convert flow-tools flow files to ASCII CSV, cflowd, pcap, wire, mySQL, and PGSQL format. OPTIONS -d debug_level Enable debugging….
NAME flow-expire – Manage storage of flow file archives by expiring old data. SYNOPSIS flow-expire [ -h ] [ -d debug_level ] [ -e expire_count ] [ -E expire_size ] -w workdir DESCRIPTION The flow-expire utility will remove the oldest flow files in a directory based on either a count of files or space utilization….