flow-send(1)

flow-send(1) General Commands Manual flow-send(1)

2
3
4

NAME

6       flow-send — Transmit flow data with the NetFlow protocol.
7

SYNOPSIS

9       flow-send   [-h]    [-d  debug_level]   [-m  privacy_mask]   [-s]   [-x
10       xmit_delay]  [-V pdu_version] localip/remoteip/port
11

DESCRIPTION

13       The flow-send utility is used to transmit flows in NetFlow format to  a
14       collector specified by localip/remoteip/port.
15

OPTIONS

17       -d debug_level
18                 Enable debugging.
19
20       -h        Display help.
21
22       -s        Enable spoofing of source IP address.
23
24       -m privacy_mask
25                 Apply  privacy_mask  to the source and destination IP address
26                 of flows.  For example a privacy_mask of 255.255.255.0  would
27                 convert  flows  with source/destination IP addresses 10.1.1.1
28                 and 10.2.2.2 to 10.1.1.0 and 10.2.2.0 respectively.
29
30       -V pdu_version
31                 Use pdu_version format when transmitting.
32
33           1    NetFlow version 1 (No sequence numbers, AS, or mask)
34           5    NetFlow version 5
35           6    NetFlow version 6 (5+ Encapsulation size)
36           7    NetFlow version 7 (Catalyst switches)
37           8.1  NetFlow AS Aggregation
38           8.2  NetFlow Proto Port Aggregation
39           8.3  NetFlow Source Prefix Aggregation
40           8.4  NetFlow Destination Prefix Aggregation
41           8.5  NetFlow Prefix Aggregation
42           8.6  NetFlow Destination (Catalyst switches)
43           8.7  NetFlow Source Destination (Catalyst switches)
44           8.8  NetFlow Full Flow (Catalyst switches)
45           8.9  NetFlow ToS AS Aggregation
46           8.10 NetFlow ToS Proto Port Aggregation
47           8.11 NetFlow ToS Source Prefix Aggregation
48           8.12 NetFlow ToS Destination Prefix Aggregation
49           8.13 NetFlow ToS Prefix Aggregation
50           8.14 NetFlow ToS Prefix Port Aggregation
51           1005 Flow-Tools tagged version 5
52
53       -x xmit_delay
54                 Configure a microsecond transmit delay between packets.  This
55                 may be necessary in some configurations to prevent a transmit
56                 buffer overrun.
57

EXAMPLES

59       Transmit all flows in the directory /flows/krc4  to  the  collector  at
60       10.0.0.1 listening on port 9500.
61
62         flow-cat /flows/krc4 | flow-send 0/10.0.0.1/9500
63
64       Generate a test pattern of version 7 flows and send them to a collector
65       at 10.0.0.1 listening on port 9500.
66
67         flow-gen -V7 | flow-send 0/10.0.0.1/9500
68

BUGS

70       It is not currently possible to convert between the aggregated  formats
71       (8.x) and the non aggregated formats (1,5,6,7).
72

AUTHOR

74       Mark Fullmer maf@splintered.net
75