⭐ 欢迎来到虫虫下载站! | 📦 资源下载 📁 资源专辑 ℹ️ 关于我们
⭐ 虫虫下载站

📄 flow-send.html

📁 netflow,抓包
💻 HTML
字号:
<HTML><HEAD><TITLE>flow-send</TITLE><METANAME="GENERATOR"CONTENT="Modular DocBook HTML Stylesheet Version 1.73"></HEAD><BODYCLASS="REFENTRY"BGCOLOR="#FFFFFF"TEXT="#000000"LINK="#0000FF"VLINK="#840084"ALINK="#0000FF"><H1><ANAME="AEN1"><SPANCLASS="APPLICATION">flow-send</SPAN></A></H1><DIVCLASS="REFNAMEDIV"><ANAME="AEN6"></A><H2>Name</H2><SPANCLASS="APPLICATION">flow-send</SPAN>&nbsp;--&nbsp;Transmit flow data with the NetFlow protocol.</DIV><DIVCLASS="REFSYNOPSISDIV"><ANAME="AEN10"></A><H2>Synopsis</H2><P><BCLASS="COMMAND">flow-send</B>  [-h] [-d<TTCLASS="REPLACEABLE"><I> debug_level</I></TT>] [-m<TTCLASS="REPLACEABLE"><I> privacy_mask</I></TT>] [-s] [-x<TTCLASS="REPLACEABLE"><I> xmit_delay</I></TT>] [-V<TTCLASS="REPLACEABLE"><I> pdu_version</I></TT>] {<TTCLASS="REPLACEABLE"><I>localip/remoteip/port</I></TT>}</P></DIV><DIVCLASS="REFSECT1"><ANAME="AEN25"></A><H2>DESCRIPTION</H2><P>The <BCLASS="COMMAND">flow-send</B> utility is used to transmit flows in NetFlowformat to a collector specified by localip/remoteip/port.</P></DIV><DIVCLASS="REFSECT1"><ANAME="AEN29"></A><H2>OPTIONS</H2><P></P><DIVCLASS="VARIABLELIST"><DL><DT>-d<TTCLASS="REPLACEABLE"><I> debug_level</I></TT></DT><DD><P>Enable debugging.</P></DD><DT>-h</DT><DD><P>Display help.</P></DD><DT>-s</DT><DD><P>Enable spoofing of source IP address.</P></DD><DT>-m<TTCLASS="REPLACEABLE"><I> privacy_mask</I></TT></DT><DD><P>Apply <TTCLASS="REPLACEABLE"><I>privacy_mask</I></TT> to the source and destination IPaddress of flows.  For example a privacy_mask of 255.255.255.0 would convertflows with source/destination IP addresses 10.1.1.1 and 10.2.2.2 to 10.1.1.0and 10.2.2.0 respectively.</P></DD><DT>-V<TTCLASS="REPLACEABLE"><I> pdu_version</I></TT></DT><DD><P>Use <TTCLASS="REPLACEABLE"><I>pdu_version</I></TT> format when transmitting.<PCLASS="LITERALLAYOUT">&nbsp;&nbsp;&nbsp;&nbsp;1&nbsp;&nbsp;&nbsp;&nbsp;NetFlow&nbsp;version&nbsp;1&nbsp;(No&nbsp;sequence&nbsp;numbers,&nbsp;AS,&nbsp;or&nbsp;mask)<br>&nbsp;&nbsp;&nbsp;&nbsp;5&nbsp;&nbsp;&nbsp;&nbsp;NetFlow&nbsp;version&nbsp;5<br>&nbsp;&nbsp;&nbsp;&nbsp;6&nbsp;&nbsp;&nbsp;&nbsp;NetFlow&nbsp;version&nbsp;6&nbsp;(5+&nbsp;Encapsulation&nbsp;size)<br>&nbsp;&nbsp;&nbsp;&nbsp;7&nbsp;&nbsp;&nbsp;&nbsp;NetFlow&nbsp;version&nbsp;7&nbsp;(Catalyst&nbsp;switches)<br>&nbsp;&nbsp;&nbsp;&nbsp;8.1&nbsp;&nbsp;NetFlow&nbsp;AS&nbsp;Aggregation<br>&nbsp;&nbsp;&nbsp;&nbsp;8.2&nbsp;&nbsp;NetFlow&nbsp;Proto&nbsp;Port&nbsp;Aggregation<br>&nbsp;&nbsp;&nbsp;&nbsp;8.3&nbsp;&nbsp;NetFlow&nbsp;Source&nbsp;Prefix&nbsp;Aggregation<br>&nbsp;&nbsp;&nbsp;&nbsp;8.4&nbsp;&nbsp;NetFlow&nbsp;Destination&nbsp;Prefix&nbsp;Aggregation<br>&nbsp;&nbsp;&nbsp;&nbsp;8.5&nbsp;&nbsp;NetFlow&nbsp;Prefix&nbsp;Aggregation<br>&nbsp;&nbsp;&nbsp;&nbsp;8.6&nbsp;&nbsp;NetFlow&nbsp;Destination&nbsp;(Catalyst&nbsp;switches)<br>&nbsp;&nbsp;&nbsp;&nbsp;8.7&nbsp;&nbsp;NetFlow&nbsp;Source&nbsp;Destination&nbsp;(Catalyst&nbsp;switches)<br>&nbsp;&nbsp;&nbsp;&nbsp;8.8&nbsp;&nbsp;NetFlow&nbsp;Full&nbsp;Flow&nbsp;(Catalyst&nbsp;switches)<br>&nbsp;&nbsp;&nbsp;&nbsp;8.9&nbsp;&nbsp;NetFlow&nbsp;ToS&nbsp;AS&nbsp;Aggregation<br>&nbsp;&nbsp;&nbsp;&nbsp;8.10&nbsp;NetFlow&nbsp;ToS&nbsp;Proto&nbsp;Port&nbsp;Aggregation<br>&nbsp;&nbsp;&nbsp;&nbsp;8.11&nbsp;NetFlow&nbsp;ToS&nbsp;Source&nbsp;Prefix&nbsp;Aggregation<br>&nbsp;&nbsp;&nbsp;&nbsp;8.12&nbsp;NetFlow&nbsp;ToS&nbsp;Destination&nbsp;Prefix&nbsp;Aggregation<br>&nbsp;&nbsp;&nbsp;&nbsp;8.13&nbsp;NetFlow&nbsp;ToS&nbsp;Prefix&nbsp;Aggregation<br>&nbsp;&nbsp;&nbsp;&nbsp;8.14&nbsp;NetFlow&nbsp;ToS&nbsp;Prefix&nbsp;Port&nbsp;Aggregation<br>&nbsp;&nbsp;&nbsp;&nbsp;1005&nbsp;Flow-Tools&nbsp;tagged&nbsp;version&nbsp;5</P></P></DD><DT>-x<TTCLASS="REPLACEABLE"><I> xmit_delay</I></TT></DT><DD><P>Configure a microsecond transmit delay between packets.  This may be necessary in some configurations to prevent a transmit buffer overrun.</P></DD></DL></DIV></DIV><DIVCLASS="REFSECT1"><ANAME="AEN63"></A><H2>EXAMPLES</H2><DIVCLASS="INFORMALEXAMPLE"><ANAME="AEN65"></A><P></P><P>Transmit all flows in the directory /flows/krc4 to the collector at 10.0.0.1listening on port 9500.</P><P>  <BCLASS="COMMAND">flow-cat /flows/krc4 | flow-send 0/10.0.0.1/9500</B></P><P>Generate a test pattern of version 7 flows and send them to a collector at 10.0.0.1 listening on port 9500.</P><P>  <BCLASS="COMMAND">flow-gen -V7 | flow-send 0/10.0.0.1/9500</B></P><P></P></DIV></DIV><DIVCLASS="REFSECT1"><ANAME="AEN72"></A><H2>BUGS</H2><P>It is not currently possible to convert between the aggregated formats (8.x)and the non aggregated formats (1,5,6,7).</P></DIV><DIVCLASS="REFSECT1"><ANAME="AEN75"></A><H2>AUTHOR</H2><P>Mark Fullmer<TTCLASS="EMAIL">&#60;<AHREF="mailto:maf@splintered.net">maf@splintered.net</A>&#62;</TT></P></DIV><DIVCLASS="REFSECT1"><ANAME="AEN82"></A><H2>SEE ALSO</H2><P><SPANCLASS="APPLICATION">flow-tools</SPAN>(1)</P></DIV></BODY></HTML>

⌨️ 快捷键说明

复制代码 Ctrl + C
搜索代码 Ctrl + F
全屏模式 F11
切换主题 Ctrl + Shift + D
显示快捷键 ?
增大字号 Ctrl + =
减小字号 Ctrl + -