Skip to content. Skip to navigation

Portal flowmon

Sections

Personal tools

Log in
Join

You are here: Home → FlowMon Probe → Manual Pages → flowmon_nf9

Document Actions

flowmon_nf9

by Ladislav Lhotka — last modified 2006-05-24 15:23

Contributors: Pavel Čeleda, Tomáš Koníř, Milan Kováčik, Vojtěch Krmíček, Ladislav Lhotka, Petr Špringl

program for exporting FlowMon probe data in NetFlow version 9 format

Synopsis

flowmon_nf9 [-d] [-F cfgfile] [-h] [-V] [-4|-6] [-i card:port] [-v level] [-D level] [-t num] [-T tfile] host:port

Description

The flowmon_nf9 program reads data from the FlowMon probe and sends them to a remote collector in the NetFlow version 9 format.

flowmon_nf9 is invoked with the hostname or IP address of the remote collector and the port number at which the collector is listening.

The program supports transport of NetFlow records over both IPv4 and IPv6. If the host argument is specified as IP address, the program will use the corresponding transport. If host is a DNS name, the program first tries to resolve it as an AAAA record and use the IPv6 transport. If this fails, the name is resolved as an A record and IPv4 is used. You can override this by using either -4 or -6 option.

Options

-d: Run the program as a daemon.
-F cfgfile: Configure flow record filtering as specified in cfgfile. By default, no filtering is performed. Syntax of the configuration file is described in flowfilter.conf(5).
-h: Display program help.
-V: Show program version.
-4 or -6: Force IPv4 or IPv6 transport of NetFlow records. These two options are mutually exclusive.
-i card:port: Select the FlowMon probe to use and its interface port. The default, and actually the only currently supported combination is 0:0.
-v level: Set the verbosity level (0 to 5).
-D level: Set the level of debugging information sent to stderr (0 to 5).
-t num: Send template records after every num packets.
-T tfile: Use NetFlow v9 templates specified in tfile instead of the default ones.