2015-10-03 14:06:34 +02:00
|
|
|
.TH ft2nfdump 1 2009\-09\-09 "" ""
|
|
|
|
|
.SH NAME
|
|
|
|
|
ft2nfdump \- flow-tools data converter program
|
|
|
|
|
.SH SYNOPSIS
|
|
|
|
|
.HP 5
|
|
|
|
|
.B ft2nfdump [options]
|
|
|
|
|
.SH DESCRIPTION
|
|
|
|
|
.B ft2nfdump
|
|
|
|
|
is the flow-tools converter program to read, convert and store netflow
|
|
|
|
|
data, created with the flow-tools package. It works either as a pipe filter
|
|
|
|
|
or reads flow-tools data format directly from file and exports nfdump data format
|
|
|
|
|
at stdout.
|
|
|
|
|
|
|
|
|
|
.SH OPTIONS
|
|
|
|
|
.TP 3
|
|
|
|
|
.B -r <flow-tools-file>
|
|
|
|
|
Read flow-tools formated netflow data from file \fIflow-tools-file.
|
|
|
|
|
Default: Read from stdin.
|
|
|
|
|
.TP 3
|
2015-10-03 15:56:21 +02:00
|
|
|
.B -w <nfdump-file>
|
|
|
|
|
Write nfdump formated file for converted netflow data
|
|
|
|
|
Default: Write to stdout.
|
|
|
|
|
.TP 3
|
|
|
|
|
.B -j
|
|
|
|
|
Compress flows. Use bz2 compression in output file. Space efficient methode
|
|
|
|
|
.TP 3
|
|
|
|
|
.B -z
|
|
|
|
|
Compress flows. Use fast LZO1X\-1 compression in output file. Fastest method
|
|
|
|
|
.TP 3
|
2015-10-03 14:06:34 +02:00
|
|
|
.B -c \fInum
|
|
|
|
|
Read only \fBnum\fR flows from input file.
|
|
|
|
|
.TP 3
|
|
|
|
|
.B -E
|
|
|
|
|
Print raw netflow records to stdout. This option is for debugging purpose
|
|
|
|
|
only, to see any incoming netflow data. Compatible to option -E in nfcapd.
|
|
|
|
|
.TP 3
|
|
|
|
|
.B -V
|
|
|
|
|
Print ft2nfdump version and exit.
|
|
|
|
|
.TP 3
|
|
|
|
|
.B -h
|
|
|
|
|
Print help text on stdout with all options and exit.
|
|
|
|
|
.SH "RETURN VALUE"
|
|
|
|
|
Returns
|
|
|
|
|
.PD 0
|
|
|
|
|
.RS 4
|
|
|
|
|
0 No error. \fn
|
|
|
|
|
.P
|
|
|
|
|
255 Conversion failed.
|
|
|
|
|
.RE
|
|
|
|
|
.PD
|
|
|
|
|
.SH "EXAMPLES"
|
2015-10-03 15:56:21 +02:00
|
|
|
.B flow-cat ft-v05.2015-05-01.* | ft2nfdump -j -w nfcap.20150501
|
|
|
|
|
Convert files into nfdump format.
|
|
|
|
|
.P
|
2015-10-03 14:06:34 +02:00
|
|
|
.B flow-cat ft-v05.2001-05-01.* | ft2nfdump | nfdump -w nfcap.20010501
|
|
|
|
|
Convert files into nfdump format.
|
|
|
|
|
.P
|
|
|
|
|
.B ft2nfdump -r ft-v05.2001-05-01 | nfdump -w nfcap.20010501
|
|
|
|
|
Convert files into nfdump format.
|
|
|
|
|
.P
|
|
|
|
|
.SH NOTES
|
|
|
|
|
.P
|
|
|
|
|
.SH "SEE ALSO"
|
|
|
|
|
nfcapd(1), nfdump(1), nfprofile(1), nfreplay(1)
|
|
|
|
|
.SH BUGS
|
