flow-print - print flow records in human readable form
flow-print [ -lnph? ] [ -d debug-level
] [ -f format
] [ -c comment-char
]
flow-print prints flow records in human readable format. Multiple formats are available. I prefer format 5 (guess who added it? :-), which prints the starting and ending time of the flow, the source and destination interface, IP address and ports, the IP protocol type, the TCP flags field, and the octet and packet counts, all in decimal.
Don't use buffered output.
Use symbolic names for hosts and ports. I prefer not using this, personally, since the resolution of IP addresses can be misleading through DNS cache poisoning or domain hijacking, and since traffic to/from port 80 isn't necessarily to/from a web service.
Print the contents of the header record from the file.
Get help, now!
Set the debug level.
Select the output format. There are currently 6 formats available, I'm not going to bother to describe them here, except to say that format 2 only prints TCP packets where only the SYN bit is set and the packet count is 1. My favorite is format 5, which is fairly complete, though it doesn't fit in 80 columns of text. The one line formats lend themselves better to UNIX style pipeline processing with sort, awk and other tools.
Set the comment character for headers. Default is #.
flow-capture(1), flow-cat(1), flow-connect(1), flow-dscan(1),flow-expire(1), flow-export(1), flow-fanout(1), flow-filter(1), flow-gen(1), flow-interfaces(1), flow-print(1), flow-profile(1), flow-receive(1), flow-search(1), flow-send(1), flow-sort(1), flow-stat(1),
None known at this time.