flow-print(1)

flow-print(1) General Commands Manual flow-print(1)

2
3
4

NAME

6       flow-print — Display flows in formatted ASCII.
7

SYNOPSIS

9       flow-print [-hlnpw]  [-d debug_level]  [-f format]
10

DESCRIPTION

12       The  flow-print  utility  will  display  flow  data in ASCII using pre-
13       defined formats selectable with -f.
14
15
16       Some of the less descriptive column headers are defined below
17
18       Header     Description
19       -------------------------------
20       Sif           Source Interface ifIndex.
21       DiF           Destination Interface ifIndex.
22       Pr            Protocol.
23       P             Protocol.
24       SrcP          Source Port.
25       DstP          Destination Port.
26       Pkts          Packets.
27       Octets        Octets (Bytes).
28       Active        Time in ms the flow was active.
29       B/Pk          Bytes per Packet.
30       Ts            Type of Service.
31       Fl            Flags, for TCP the cumulative or of the TCP control bits.
32       srcAS         Source AS.
33       dstAS         Destination AS.
34       Start         Start time of the flow.
35       End           End time of the flow.
36       router_sc     V7 IP address of router producing shorcuts.
37       peer_nexthop  V6 IP address of peer next hop IP address.
38       encap i/o     Version 6 only.  Encapsulation size in/out
39       duration      Time in ms the flow was active.
40       input         Input Interface ifIndex.
41       output        Output Interface ifIndex.
42       flows         Number of aggregated flows.
43       mTos          V8.x ToS of pkts that exceeded the contract.
44       xpackets      V8.x Packets that exceed the contract.
45

OPTIONS

47       -d debug_level
48                 Enable debugging.
49
50       -f format Select format.  The default is  appropriate  for  the  export
51                 type of the flow data.  Available formats are:
52
53           0 1 line, interfaces, hex ports
54           1 2 line (includes timing and flags)
55           2 2 line candidate TCP syn attack flows
56           3 1 line, no interfaces, decimal ports
57           4 1 line with AS number
58           5 1 line, 132 column
59           6 show ip accounting emulation
60           7 1 line, 132 column +router_id
61           8 1 line, 132 column +encapsulation
62           9 1 line with tag values
63          10 AS aggregation
64          11 Protocol Port aggregation
65          12 Source Prefix aggregation
66          13 Destination Prefix aggregation
67          14 Prefix aggregation
68          15 Destination aggregation (Catalyst)
69          16 Source Destination aggregation (Catalyst)
70          17 Full Flow (Catalyst)
71          18 ToS AS Aggregation
72          19 ToS Proto Port aggregation
73          20 ToS Source Prefix aggregation
74          21 ToS Destination Prefix aggregation
75          22 ToS Prefix Aggregation
76          23 ToS Prefix Port aggregation
77          24 Full (Catalyst)
78
79       -h        Display help.
80
81       -l        Unbuffer output.
82
83       -n        Use symbolic names where appropriate.
84
85       -p        Display header information.
86
87       -w        Wide output.
88

EXAMPLES

90       Display flows in flowfile
91
92         flow-print < flowfile
93

FILES

95         Configuration files:
96           Symbols - /var/flow-tools/sym/*.
97

BUGS

99       None known.
100

AUTHOR

102       Mark Fullmer maf@splintered.net
103