1FLOW-SEND(1) FLOW-SEND(1)
2
3
4
6 flow-send - Transmit flow data with the NetFlow protocol.
7
9 flow-send [ -h ] [ -d debug_level ] [ -m privacy_mask ] [ -s ] [ -x
10 xmit_delay ] [ -V pdu_version ] localip/remoteip/port
11
13 The flow-send utility is used to transmit flows in NetFlow format to a
14 collector specified by localip/remoteip/port.
15
17 -d debug_level
18 Enable debugging.
19
20 -h Display help.
21
22 -s Enable spoofing of source IP address.
23
24 -m privacy_mask
25 Apply privacy_mask to the source and destination IP address of
26 flows. For example a privacy_mask of 255.255.255.0 would convert
27 flows with source/destination IP addresses 10.1.1.1 and 10.2.2.2
28 to 10.1.1.0 and 10.2.2.0 respectively.
29
30 -V pdu_version
31 Use pdu_version format when transmitting.
32
33 1 NetFlow version 1 (No sequence numbers, AS, or mask)
34 5 NetFlow version 5
35 6 NetFlow version 6 (5+ Encapsulation size)
36 7 NetFlow version 7 (Catalyst switches)
37 8.1 NetFlow AS Aggregation
38 8.2 NetFlow Proto Port Aggregation
39 8.3 NetFlow Source Prefix Aggregation
40 8.4 NetFlow Destination Prefix Aggregation
41 8.5 NetFlow Prefix Aggregation
42 8.6 NetFlow Destination (Catalyst switches)
43 8.7 NetFlow Source Destination (Catalyst switches)
44 8.8 NetFlow Full Flow (Catalyst switches)
45 8.9 NetFlow ToS AS Aggregation
46 8.10 NetFlow ToS Proto Port Aggregation
47 8.11 NetFlow ToS Source Prefix Aggregation
48 8.12 NetFlow ToS Destination Prefix Aggregation
49 8.13 NetFlow ToS Prefix Aggregation
50 8.14 NetFlow ToS Prefix Port Aggregation
51 1005 Flow-Tools tagged version 5
52
53
54 -x xmit_delay
55 Configure a microsecond transmit delay between packets. This may
56 be necessary in some configurations to prevent a transmit buffer
57 overrun.
58
60 Transmit all flows in the directory /flows/krc4 to the collector at
61 10.0.0.1 listening on port 9500.
62
63 flow-cat /flows/krc4 | flow-send 0/10.0.0.1/9500
64
65 Generate a test pattern of version 7 flows and send them to a collector
66 at 10.0.0.1 listening on port 9500.
67
68 flow-gen -V7 | flow-send 0/10.0.0.1/9500
69
71 It is not currently possible to convert between the aggregated formats
72 (8.x) and the non aggregated formats (1,5,6,7).
73
75 Mark Fullmer <maf@splintered.net>
76
78 flow-tools(1)
79
80
81
82 26 Август 2010 FLOW-SEND(1)