SOFTFLOWCTL(8) BSD System Manager's Manual SOFTFLOWCTL(8)NAME
softflowctl -- Remote control program for softflowd
SYNOPSIS
softflowctl [-h] [-c ctl_sock] command
DESCRIPTION
softflowctl is a remote control program used to control a running softflowd(8) daemon.
The command line options are as follows:
-c ctlsock
Specify an alternate location for the remote control socket. Default is /var/run/softflowd.ctl
-h Display command line usage information.
COMMANDS
shutdown
Ask softflowd(8) to gracefully exit. This is equivalent to sending it a SIGTERM or SIGINT.
exit Ask softflowd(8) to immediately exit. No flow expiry processing or data export is performed.
expire-all
Immediately expire all tracked flows.
delete-all
Immediately delete all tracked flows. No flow expiry processing or data export is performed.
statistics
Return statistics collected by softflowd(8) on expired flows.
debug+ Increase the debugging level of softflowd(8)
debug- Decrease the debugging level.
stop-gather
Stops network data collection by softflowd(8).
start-gather
Resumes network data collection.
dump-flows
Return information on all tracked flows.
timeouts
Print information on flow timeout parameters.
send-template
Resend a NetFlow v.9 template record before the next flow export. Has no effect for other flow export versions.
BUGS
All times are unconditionally displayed in UTC, regardless of the system timezone.
AUTHORS
Damien Miller <djm@mindrot.org>
SEE ALSO softflowd(8)BSD October 18, 2002 BSD
Check Out this Related Man Page
flow-receive(1) General Commands Manual flow-receive(1)NAME
flow-receive -- Receive flow data with the NetFlow protocol.
SYNOPSIS
flow-receive [-h] [-b big|little] [-C comment] [-d debug_level] [-o output_file] [-S stat_interval] [-V pdu_version] [-z z_level]
localip/remoteip/port
DESCRIPTION
The flow-receive utility is used to receive flows in NetFlow format. When the remoteip is configured only flows from that exporter will be
processed, this is the most secure and recommended configuration. When the localip is configured flow-receive will only process flows sent
to the localip IP address. If remoteip is 0 (not configured) flows from any source IP address are accepted. Multiple non aggregated PDU
versions may be accepted at once to support Cisco's Catalyst 6500 NetFlow implementation which exports from both the supervisor and MSFC
with the same IP address and same port but different export versions. In this case the exports will be stored in the format specified by
the -V flag or whichever export type is received first.
OPTIONS -b big|little
Byte order of output.
-C Comment
Add a comment.
-d debug_level
Enable debugging.
-h Display help.
-o file Write to file instead of the standard out.
-S stat_interval
When configured flow-receive will emit a timestamped message on stderr every stat_interval minutes indicating counters such as
the number of flows received, packets processed, and lost flows.
-V pdu_version
Use pdu_version format output.
1 NetFlow version 1 (No sequence numbers, AS, or mask)
5 NetFlow version 5
6 NetFlow version 6 (5+ Encapsulation size)
7 NetFlow version 7 (Catalyst switches)
8.1 NetFlow AS Aggregation
8.2 NetFlow Proto Port Aggregation
8.3 NetFlow Source Prefix Aggregation
8.4 NetFlow Destination Prefix Aggregation
8.5 NetFlow Prefix Aggregation
8.6 NetFlow Destination (Catalyst switches)
8.7 NetFlow Source Destination (Catalyst switches)
8.8 NetFlow Full Flow (Catalyst switches)
8.9 NetFlow ToS AS Aggregation
8.10 NetFlow ToS Proto Port Aggregation
8.11 NetFlow ToS Source Prefix Aggregation
8.12 NetFlow ToS Destination Prefix Aggregation
8.13 NetFlow ToS Prefix Aggregation
8.14 NetFlow ToS Prefix Port Aggregation
1005 Flow-Tools tagged version 5
-z z_level
Configure compression level to z_level. 0 is disabled (no compression), 9 is highest compression.
EXAMPLES
Listen on port 9800 on any local interface for exports from IP address 10.0.0.1, store the exports in flows
flow-receive 0/10.0.0.1/9800 > flows
Listen on port 9800 on any local interface from any IP address, display the received flows with flow-print.
flow-receive 0/0/9800 | flow-print
BUGS
It is not currently possible to convert between the aggregated formats (8.x) and the non aggregated formats (1,5,6,7).
AUTHOR
Mark Fullmer maf@splintered.net
SEE ALSO flow-tools(1)flow-receive(1)