<HTML ><HEAD ><TITLE >flow-print</TITLE ><META NAME="GENERATOR" CONTENT="Modular DocBook HTML Stylesheet Version 1.73 "></HEAD ><BODY CLASS="REFENTRY" BGCOLOR="#FFFFFF" TEXT="#000000" LINK="#0000FF" VLINK="#840084" ALINK="#0000FF" ><H1 ><A NAME="AEN1" ><SPAN CLASS="APPLICATION" >flow-print</SPAN ></A ></H1 ><DIV CLASS="REFNAMEDIV" ><A NAME="AEN6" ></A ><H2 >Name</H2 ><SPAN CLASS="APPLICATION" >flow-print</SPAN > -- Display flows in formatted ASCII.</DIV ><DIV CLASS="REFSYNOPSISDIV" ><A NAME="AEN10" ></A ><H2 >Synopsis</H2 ><P ><B CLASS="COMMAND" >flow-print</B > [-hlnpw] [-d<TT CLASS="REPLACEABLE" ><I > debug_level</I ></TT >] [-f<TT CLASS="REPLACEABLE" ><I > format</I ></TT >]</P ></DIV ><DIV CLASS="REFSECT1" ><A NAME="AEN18" ></A ><H2 >DESCRIPTION</H2 ><P >The <B CLASS="COMMAND" >flow-print</B > utility will display flow data in ASCII using pre-defined formats selectable with -f. <P CLASS="LITERALLAYOUT" >Some of the less descriptive column headers are defined below<br> <br> Header Description<br> -------------------------------<br> Sif Source Interface ifIndex.<br> DiF Destination Interface ifIndex.<br> Pr Protocol.<br> P Protocol.<br> SrcP Source Port.<br> DstP Destination Port.<br> Pkts Packets.<br> Octets Octets (Bytes).<br> Active Time in ms the flow was active.<br> B/Pk Bytes per Packet.<br> Ts Type of Service.<br> Fl Flags, for TCP the cumulative or of the TCP control bits.<br> srcAS Source AS.<br> dstAS Destination AS.<br> Start Start time of the flow.<br> End End time of the flow.<br> router_sc V7 IP address of router producing shorcuts.<br> peer_nexthop V6 IP address of peer next hop IP address.<br> encap i/o Version 6 only. Encapsulation size in/out<br> duration Time in ms the flow was active.<br> input Input Interface ifIndex.<br> output Output Interface ifIndex.<br> flows Number of aggregated flows.<br> mTos V8.x ToS of pkts that exceeded the contract.<br> xpackets V8.x Packets that exceed the contract.</P ></P ></DIV ><DIV CLASS="REFSECT1" ><A NAME="AEN23" ></A ><H2 >OPTIONS</H2 ><P ></P ><DIV CLASS="VARIABLELIST" ><DL ><DT >-d<TT CLASS="REPLACEABLE" ><I > debug_level</I ></TT ></DT ><DD ><P >Enable debugging.</P ></DD ><DT >-f<TT CLASS="REPLACEABLE" ><I > format</I ></TT ></DT ><DD ><P >Select format. The default is appropriate for the export type of the flow data. Available formats are: <P CLASS="LITERALLAYOUT" > 0 1 line, interfaces, hex ports<br> 1 2 line (includes timing and flags)<br> 2 2 line candidate TCP syn attack flows<br> 3 1 line, no interfaces, decimal ports<br> 4 1 line with AS number<br> 5 1 line, 132 column<br> 6 show ip accounting emulation<br> 7 1 line, 132 column +router_id<br> 8 1 line, 132 column +encapsulation<br> 9 1 line with tag values<br> 10 AS aggregation<br> 11 Protocol Port aggregation<br> 12 Source Prefix aggregation<br> 13 Destination Prefix aggregation<br> 14 Prefix aggregation<br> 15 Destination aggregation (Catalyst)<br> 16 Source Destination aggregation (Catalyst)<br> 17 Full Flow (Catalyst)<br> 18 ToS AS Aggregation<br> 19 ToS Proto Port aggregation<br> 20 ToS Source Prefix aggregation<br> 21 ToS Destination Prefix aggregation<br> 22 ToS Prefix Aggregation<br> 23 ToS Prefix Port aggregation</P ></P ></DD ><DT >-h</DT ><DD ><P >Display help.</P ></DD ><DT >-l</DT ><DD ><P >Unbuffer output.</P ></DD ><DT >-n</DT ><DD ><P >Use symbolic names where appropriate.</P ></DD ><DT >-p</DT ><DD ><P >Display header information.</P ></DD ><DT >-w</DT ><DD ><P >Wide output.</P ></DD ></DL ></DIV ></DIV ><DIV CLASS="REFSECT1" ><A NAME="AEN57" ></A ><H2 >EXAMPLES</H2 ><DIV CLASS="INFORMALEXAMPLE" ><A NAME="AEN59" ></A ><P ></P ><P >Display flows in <TT CLASS="FILENAME" >flowfile</TT ></P ><P > <B CLASS="COMMAND" >flow-print < flowfile</B ></P ><P ></P ></DIV ></DIV ><DIV CLASS="REFSECT1" ><A NAME="AEN64" ></A ><H2 >BUGS</H2 ><P >None known.</P ></DIV ><DIV CLASS="REFSECT1" ><A NAME="AEN67" ></A ><H2 >FILES</H2 ><P >Symbols are located in <TT CLASS="FILENAME" >/var/lib/sym/*</TT ></P ></DIV ><DIV CLASS="REFSECT1" ><A NAME="AEN71" ></A ><H2 >AUTHOR</H2 ><P >Mark Fullmer <TT CLASS="EMAIL" ><<A HREF="mailto:maf@splintered.net" >maf@splintered.net</A >></TT ></P ></DIV ><DIV CLASS="REFSECT1" ><A NAME="AEN78" ></A ><H2 >SEE ALSO</H2 ><P ><SPAN CLASS="APPLICATION" >flow-tools</SPAN >(1)</P ></DIV ></BODY ></HTML >