<HTML ><HEAD ><TITLE >flow-split</TITLE ><META NAME="GENERATOR" CONTENT="Modular DocBook HTML Stylesheet Version 1.73 "></HEAD ><BODY CLASS="REFENTRY" BGCOLOR="#FFFFFF" TEXT="#000000" LINK="#0000FF" VLINK="#840084" ALINK="#0000FF" ><H1 ><A NAME="AEN1" ><SPAN CLASS="APPLICATION" >flow-split</SPAN ></A ></H1 ><DIV CLASS="REFNAMEDIV" ><A NAME="AEN6" ></A ><H2 >Name</H2 ><SPAN CLASS="APPLICATION" >flow-split</SPAN > -- Split flow files into smaller files.</DIV ><DIV CLASS="REFSYNOPSISDIV" ><A NAME="AEN10" ></A ><H2 >Synopsis</H2 ><P ><B CLASS="COMMAND" >flow-split</B > [-gGhn] [-b<TT CLASS="REPLACEABLE" ><I > big</I ></TT >|<TT CLASS="REPLACEABLE" ><I >little</I ></TT >] [-C<TT CLASS="REPLACEABLE" ><I > comment</I ></TT >] [-d<TT CLASS="REPLACEABLE" ><I > debug_level</I ></TT >] [-N<TT CLASS="REPLACEABLE" ><I > nflows</I ></TT >] [-o<TT CLASS="REPLACEABLE" ><I > outfile_basename</I ></TT >] [-T<TT CLASS="REPLACEABLE" ><I > nseconds</I ></TT >] [-z<TT CLASS="REPLACEABLE" ><I > z_level</I ></TT >]</P ></DIV ><DIV CLASS="REFSECT1" ><A NAME="AEN29" ></A ><H2 >DESCRIPTION</H2 ><P >The <B CLASS="COMMAND" >flow-split</B > utility will split a flow file into smaller files based on the the number of flows or the ammount of time that has passed.</P ></DIV ><DIV CLASS="REFSECT1" ><A NAME="AEN33" ></A ><H2 >OPTIONS</H2 ><P ></P ><DIV CLASS="VARIABLELIST" ><DL ><DT >-b<TT CLASS="REPLACEABLE" ><I > big</I ></TT >|<TT CLASS="REPLACEABLE" ><I >little</I ></TT ></DT ><DD ><P >Byte order of output.</P ></DD ><DT >-C<TT CLASS="REPLACEABLE" ><I > Comment</I ></TT ></DT ><DD ><P >Add a comment.</P ></DD ><DT >-d<TT CLASS="REPLACEABLE" ><I > debug_level</I ></TT ></DT ><DD ><P >Enable debugging.</P ></DD ><DT >-g</DT ><DD ><P >Split on source tag.</P ></DD ><DT >-G</DT ><DD ><P >Split on destination tag.</P ></DD ><DT >-h</DT ><DD ><P >Display help.</P ></DD ><DT >-n</DT ><DD ><P >Use symbols for tag field in filename.</P ></DD ><DT >-N<TT CLASS="REPLACEABLE" ><I > nflows</I ></TT ></DT ><DD ><P >Split after processing <TT CLASS="REPLACEABLE" ><I >nflows</I ></TT >.</P ></DD ><DT >-o<TT CLASS="REPLACEABLE" ><I > outfile_basename</I ></TT ></DT ><DD ><P >The basename of the resulting files.</P ></DD ><DT >-T<TT CLASS="REPLACEABLE" ><I > nsecond</I ></TT ></DT ><DD ><P >Split after processing an interval of <TT CLASS="REPLACEABLE" ><I >nseconds</I ></TT > flows.</P ></DD ><DT >-z<TT CLASS="REPLACEABLE" ><I > z_level</I ></TT ></DT ><DD ><P >Configure compression level to <TT CLASS="REPLACEABLE" ><I > z_level</I ></TT >. 0 is disabled (no compression), 9 is highest compression.</P ></DD ></DL ></DIV ></DIV ><DIV CLASS="REFSECT1" ><A NAME="AEN91" ></A ><H2 >EXAMPLES</H2 ><DIV CLASS="INFORMALEXAMPLE" ><A NAME="AEN93" ></A ><P ></P ><P >Create 1 minute flow files from the flow archive in <TT CLASS="FILENAME" >/flows/krc4</TT >. Store the results in <TT CLASS="FILENAME" >/flows/krc4.split</TT ></P ><P > <B CLASS="COMMAND" >flow-cat /flows/krc4 | flow-split -T60 -o /flows/krc4.split/1min</B >.</P ><P ></P ></DIV ></DIV ><DIV CLASS="REFSECT1" ><A NAME="AEN99" ></A ><H2 >BUGS</H2 ><P >None known.</P ></DIV ><DIV CLASS="REFSECT1" ><A NAME="AEN102" ></A ><H2 >AUTHOR</H2 ><P >Mark Fullmer <TT CLASS="EMAIL" ><<A HREF="mailto:maf@splintered.net" >maf@splintered.net</A >></TT ></P ></DIV ><DIV CLASS="REFSECT1" ><A NAME="AEN109" ></A ><H2 >SEE ALSO</H2 ><P ><SPAN CLASS="APPLICATION" >flow-tools</SPAN >(1)</P ></DIV ></BODY ></HTML >