flow-split.1

来自「netflow,抓包」· 1 代码 · 共 104 行

...\" $Header: /usr/src/docbook-to-man/cmd/RCS/docbook-to-man.sh,v 1.3 1996/06/17 03:36:49 fld Exp $
...\"
...\"	transcript compatibility for postscript use.
...\"
...\"	synopsis:  .P! <file.ps>
...\"
.de P!
\\&.
.fl			\" force out current output buffer
\\!%PB
\\!/showpage{}def
...\" the following is from Ken Flowers -- it prevents dictionary overflows
\\!/tempdict 200 dict def tempdict begin
.fl			\" prolog
.sy cat \\$1\" bring in postscript file
...\" the following line matches the tempdict above
\\!end % tempdict %
\\!PE
\\!.
.sp \\$2u	\" move below the image
..
.de pF
.ie     \\*(f1 .ds f1 \\n(.f
.el .ie \\*(f2 .ds f2 \\n(.f
.el .ie \\*(f3 .ds f3 \\n(.f
.el .ie \\*(f4 .ds f4 \\n(.f
.el .tm ? font overflow
.ft \\$1
..
.de fP
.ie     !\\*(f4 \{\
.	ft \\*(f4
.	ds f4\"
'	br \}
.el .ie !\\*(f3 \{\
.	ft \\*(f3
.	ds f3\"
'	br \}
.el .ie !\\*(f2 \{\
.	ft \\*(f2
.	ds f2\"
'	br \}
.el .ie !\\*(f1 \{\
.	ft \\*(f1
.	ds f1\"
'	br \}
.el .tm ? font underflow
..
.ds f1\"
.ds f2\"
.ds f3\"
.ds f4\"
.ta 8n 16n 24n 32n 40n 48n 56n 64n 72n 
.TH "\fBflow-split\fP" "1"
.SH "NAME"
\fBflow-split\fP \(em Split flow files into smaller files\&.
.SH "SYNOPSIS"
.PP
\fBflow-split\fP [-gGhn]  [-b\fI big\fP|\fIlittle\fP]  [-C\fI comment\fP]  [-d\fI debug_level\fP]  [-N\fI nflows\fP]  [-o\fI outfile_basename\fP]  [-T\fI nseconds\fP]  [-z\fI z_level\fP] 
.SH "DESCRIPTION"
.PP
The \fBflow-split\fP utility will split a flow file into smaller
files based on the the number of flows or the ammount of time that
has passed\&.
.SH "OPTIONS"
.IP "-b\fI big\fP|\fIlittle\fP" 10
Byte order of output\&.
.IP "-C\fI Comment\fP" 10
Add a comment\&.
.IP "-d\fI debug_level\fP" 10
Enable debugging\&.
.IP "-g" 10
Split on source tag\&.
.IP "-G" 10
Split on destination tag\&.
.IP "-h" 10
Display help\&.
.IP "-n" 10
Use symbols for tag field in filename\&.
.IP "-N\fI nflows\fP" 10
Split after processing \fInflows\fP\&.
.IP "-o\fI outfile_basename\fP" 10
The basename of the resulting files\&.
.IP "-T\fI nsecond\fP" 10
Split after processing an interval of \fInseconds\fP flows\&.
.IP "-z\fI z_level\fP" 10
Configure compression level to \fI z_level\fP\&.  0 is
disabled (no compression), 9 is highest compression\&.
.SH "EXAMPLES"
.PP
Create 1 minute flow files from the flow archive in \fB/flows/krc4\fP\&.  Store the results in \fB/flows/krc4\&.split\fP
.PP
  \fBflow-cat /flows/krc4 | flow-split -T60 -o /flows/krc4\&.split/1min\fP\&.
.SH "BUGS"
.PP
None known\&.
.SH "AUTHOR"
.PP
Mark Fullmer maf@splintered\&.net
.SH "SEE ALSO"
.PP
\fBflow-tools\fP(1)
...\" created by instant / docbook-to-man, Sun 09 Jun 2002, 23:21