flow-merge(1) [debian man page]

flow-merge(1)						      General Commands Manual						     flow-merge(1)

NAME

       flow-merge -- Merge flow files.

SYNOPSIS

       flow-merge [-aghm]  [-b big|little]  [-C comment]  [-d debug_level]  [-o filename]  [-z z_level]  [file|directory ...]

DESCRIPTION

       The  flow-merge	utility processes files and/or directories of files in the flow-tools format.  The resulting merged data set is written to
       the standard output or file specified by -o.  If file is a single dash (`-') or absent, flow-merge  will  read  from  the  standard  input.
       Unlike flow-cat, flow-merge interleaves flow records preserving the relative chronological order.

OPTIONS

       -a	 Do not ignore filenames that begin with tmp.

       -b big|little
		 Byte order of output.

       -C Comment
		 Add a comment.

       -d debug_level
		 Enable debugging.

       -g	 Sort file list by capture start time before processing.

       -h	 Display help.

       -m	 Disable the use of mmap().

       -p	 Preload headers.  Use to preserve meta information such as lost flows.

       -o file	 Write to file instead of the standard out.

       -z z_level
		 Configure compression level to  z_level.  0 is disabled (no compression), 9 is highest compression.

       file|directory...
		 Process the files and/or directory.

EXAMPLES

       Merge all flow files begining with ft-v05.2001-05.01, use flow-print to display the results.

	   flow-merge ft-v05.2001-05-01.* | flow-print

BUGS

       None known.

AUTHOR

       Larry Lidz ellidz@eridu.uchicago.edu

SEE ALSO

       flow-tools(1)

																     flow-merge(1)

flow-mask(1)						      General Commands Manual						      flow-mask(1)

NAME

       flow-mask -- Apply tags to flow files.

SYNOPSIS

       flow-mask [-hk]	[-b big|little]  [-C comment]  [-d debug_level]  [-m mask_fname]  [-M active_def ...]

DESCRIPTION

       The flow-mask utility is used to modify the source and destination mask length's in flow records.

OPTIONS

       -b big|little
		 Byte order of output.

       -C Comment
		 Add a comment.

       -d debug_level
		 Enable debugging.

       -h	 Display help.

       -k	 Keep time from input.

       -m mask_fname
		 Load masks from mask_name.  Defaults to /etc/flow-tools/cfg/mask

       -M mask_def
		 Use active_def as the active tag definition(s).

       The configuration file is a collection of definitions.  A definition lists a sequence of prefixes and the mask length to replace the match-
       ing prefix with.  Lines begining with # are treated as comments and ignored.

       mask-definition command		   Description
       ----------------------------------------------------------------------
       mask-definition			   Begin mask-definition section
					   mask-definition foo

       prefix				   List the prefix to match on and the
					   replacement mask.
					   prefix 128.146/16 24

EXAMPLES

       #
       #file: masks
       #
       mask-definition foo
       # All networks in 128.146/16 are /24's.
	prefix 128.146/16 24
       # except for 128.146.214/24, which are /32's.
	prefix 128.146.214/24 32

       flow-cat flows | flow-mask -mfoo -Fmasks | flow-print -f4

FILES

	 Configuration files:
	   Mask - /etc/flow-tools/cfg/mask.cfg.

BUGS

       None known.

AUTHOR

       Mark Fullmer maf@splintered.net

SEE ALSO

       flow-tools(1)

																      flow-mask(1)