flow-print(1)

1FLOW-PRINT(1)                                                    FLOW-PRINT(1)
2
3
4

NAME

6       flow-print - Display flows in formatted ASCII.
7

SYNOPSIS

9       flow-print [ -hlnpw ]  [ -d debug_level ]  [ -f format ]
10

DESCRIPTION

12       The  flow-print  utility  will  display  flow  data in ASCII using pre-
13       defined formats selectable with -f.
14
15       Some of the less descriptive column headers are defined below
16
17       Header     Description
18       -------------------------------
19       Sif           Source Interface ifIndex.
20       DiF           Destination Interface ifIndex.
21       Pr            Protocol.
22       P             Protocol.
23       SrcP          Source Port.
24       DstP          Destination Port.
25       Pkts          Packets.
26       Octets        Octets (Bytes).
27       Active        Time in ms the flow was active.
28       B/Pk          Bytes per Packet.
29       Ts            Type of Service.
30       Fl            Flags, for TCP the cumulative or of the TCP control bits.
31       srcAS         Source AS.
32       dstAS         Destination AS.
33       Start         Start time of the flow.
34       End           End time of the flow.
35       router_sc     V7 IP address of router producing shorcuts.
36       peer_nexthop  V6 IP address of peer next hop IP address.
37       encap i/o     Version 6 only.  Encapsulation size in/out
38       duration      Time in ms the flow was active.
39       input         Input Interface ifIndex.
40       output        Output Interface ifIndex.
41       flows         Number of aggregated flows.
42       mTos          V8.x ToS of pkts that exceeded the contract.
43       xpackets      V8.x Packets that exceed the contract.
44
45

OPTIONS

47       -d debug_level
48              Enable debugging.
49
50       -f format
51              Select format. The default is appropriate for the export type of
52              the flow data. Available formats are:
53
54                  0 1 line, interfaces, hex ports
55                  1 2 line (includes timing and flags)
56                  2 2 line candidate TCP syn attack flows
57                  3 1 line, no interfaces, decimal ports
58                  4 1 line with AS number
59                  5 1 line, 132 column
60                  6 show ip accounting emulation
61                  7 1 line, 132 column +router_id
62                  8 1 line, 132 column +encapsulation
63                  9 1 line with tag values
64                 10 AS aggregation
65                 11 Protocol Port aggregation
66                 12 Source Prefix aggregation
67                 13 Destination Prefix aggregation
68                 14 Prefix aggregation
69                 15 Destination aggregation (Catalyst)
70                 16 Source Destination aggregation (Catalyst)
71                 17 Full Flow (Catalyst)
72                 18 ToS AS Aggregation
73                 19 ToS Proto Port aggregation
74                 20 ToS Source Prefix aggregation
75                 21 ToS Destination Prefix aggregation
76                 22 ToS Prefix Aggregation
77                 23 ToS Prefix Port aggregation
78                 24 Full (Catalyst)
79
80
81       -h     Display help.
82
83       -l     Unbuffer output.
84
85       -n     Use symbolic names where appropriate.
86
87       -p     Display header information.
88
89       -w     Wide output.
90

EXAMPLES

92       Display flows in flowfile
93
94       flow-print < flowfile
95

FILES

97       Configuration files: Symbols - /etc/flow-tools/sym/*.
98

BUGS

100       None known.
101

AUTHOR

103       Mark Fullmer <maf@splintered.net>
104