1
2NFREPLAY(1)               BSD General Commands Manual              NFREPLAY(1)
3

NAME

5     nfreplay — replay binary flow files as netflow version v5 or v9 to a re‐
6     mote host
7

SYNOPSIS

9     nfreplay -r flowfile -H remotehost -p port [-S Sourceaddr]
10              [-j mcastgroup] [-4] [-6] [-v version] [-d usec] [-b buffsize]
11              [-z num] [-c num] [-v] [-H] [filter]
12

DESCRIPTION

14     nfreplay reads binary flow files stored by any nfdump collector and sents
15     the flow records to a remote host or a multicast group.
16
17     nfreplay sends the data as netflow v5 or v9 to the remote location.
18
19     nfreplay accepts a filter to limit the flows to be sent. The filter syn‐
20     tax is equivalent to nfdump.
21
22     The options are as follows:
23
24     -r flowfile
25             Read input data from flowfile.
26
27     -H remotehost
28             Send all flows to this remote host. Accepts a symbolic name or a
29             IPv4/IPv6 IP address.
30
31     -j mcastgroup
32             Join this multicast group and send all flows to this group host.
33             Accepts a symbolic name or multicast IPv4/IPv6 IP address.
34
35     -p port
36             Send all flows to this port on the remote side. Default is 9995.
37
38     -S Sourceaddr
39             Use the specified source IP address to send the flows
40
41     -4      Forces nfreplay to send flows to a IPv4 address only. Can be used
42             if the remote host has an IPv4 and IPv6 address record.
43
44     -6      Forces nfreplay to send flows to a IPv6 address only. Can be used
45             if the remote host has an IPv4 and IPv6 address record.
46
47     -v version
48             Send flows as netflow version version.  Version V5 and v9 are
49             supported. In v5 mode, all additional elements to a stadard v5
50             record are skipped and 64bit counters are truncated to 32bit.
51             The default is v9.
52
53     -u usec
54             Delay each record by usec mirco seconds, to avoid overrun on the
55             remote host. Default is 10usec.
56
57     -B buffsize
58             Set send buffer to buffsize size in bytes. Useful to buffer
59             larger data transfers.
60
61     -z num  Flows are sent with their "real distribution" acrross time (with
62             a speed coefficient)
63             -z 1 : 5 minutes of records will be sent in 5 minutes.  - z 20 :
64             5 minutes of record will be sent in 5/20 = 0.25 minutes.
65
66     -c num  Limit number of records to send to the first num flows.
67
68     -V      Print nfreplay version and exit.
69
70     -h      Print help text on stdout with all options and exit.
71

RETURN VALUES

73     nfreplay returns
74     255 Initialization failed.
75     254 Error in filter syntax.
76     250 Internal error.
77

SEE ALSO

79     nfdump(1) nfcapd(1)
80
81BSD                            December 17, 2023                           BSD
Impressum