?? flow-report.html.in
字號:
<HTML><HEAD><TITLE>flow-report</TITLE><METANAME="GENERATOR"CONTENT="Modular DocBook HTML Stylesheet Version 1.73"></HEAD><BODYCLASS="REFENTRY"BGCOLOR="#FFFFFF"TEXT="#000000"LINK="#0000FF"VLINK="#840084"ALINK="#0000FF"><H1><ANAME="AEN1"><SPANCLASS="APPLICATION">flow-report</SPAN></A></H1><DIVCLASS="REFNAMEDIV"><ANAME="AEN6"></A><H2>Name</H2><SPANCLASS="APPLICATION">flow-report</SPAN> -- Generate reports from flow data.</DIV><DIVCLASS="REFSYNOPSISDIV"><ANAME="AEN10"></A><H2>Synopsis</H2><P><BCLASS="COMMAND">flow-report</B> [-h] [-d<TTCLASS="REPLACEABLE"><I> debug_level</I></TT>] [-s<TTCLASS="REPLACEABLE"><I> stat_fname</I></TT>] [-S<TTCLASS="REPLACEABLE"><I> stat_definition</I></TT>] [-v<TTCLASS="REPLACEABLE"><I> variable binding</I></TT>]</P></DIV><DIVCLASS="REFSECT1"><ANAME="AEN22"></A><H2>DESCRIPTION</H2><P>The <BCLASS="COMMAND">flow-report</B> utility will generate reportsfrom flow data. The reports are easy to parse ASCII text thatcan be used by a front end to produce readable reports, graphs,and charts.</P><P>Reports are definied by the 'stat-report' keyword followed by a reportname. Each report has a type defined below and other commands. Reportsare grouped into a definition with the 'stat-definition' keywordfollowed by a definition name. Each definition can invoke a filterand optionally apply tags.</P><P></P><P><PRECLASS="SCREEN">stat-report command Description/Example------------------------------------------------------------------------type Define the report type. type destination-tagfilter Apply this filter definition. filter permit-only-tcpscale Scale report by n. scale 100tag-mask Apply source and destination mask to tag. tag-mask 0xFF00 0xFF00ip-source-address-format Format of source IP address. address - address, ie 128.146.1.7 prefix-len - address/len ie 128.146.1.7/24 prefix-mask- prefix/len 128.146.1/24ip-destination-address-format Format of destination IP address. address - address, ie 128.146.1.7 prefix-len - address/len ie 128.146.1.7/24 prefix-mask- prefix/len 128.146.1/24output Start an output configuration. Multiple output configurations can be configured per report. </PRE></P><P><PRECLASS="SCREEN">output option Description/Example-------------------------------------------------------------------------path Pathname of output. If the path begins with a | the output is a pipe. The pathname is formatted through strftime(). Directories not in the path are automatically created. path /tmp/%Y/%m/%d/foo.outtime What time to use when formatting the pathname with strftime. now - current time start - first flow end - last flow mid - average of first and last.tally Emit a % total line every n records. tally 10format Output format. Currently only ascii. format asciisort Sort on a field. + ascending, - descending. sort +flows - sort on the flows fieldrecords Truncate report at n records. records 10fields Enable/Disable fields with +/-. Fields: index,first,last,flows,octets,packets, duration,pps,bps,other,key,key1,key2, key3,key4,count. fields +key,+flows,+octets,+packets,options Enable/Disable options with +/- +header - include header. +xheader - include extra header. +totals - include a totals line. +percent-total - report in % total form. +names - use symbolic names. options +header,+xheader </PRE></P><P><PRECLASS="SCREEN">stat-definition option Description/Example-------------------------------------------------------------------------filter Apply this filter definition. filter defaulttag Apply this tag definition. tag defaultmask Apply this mask definition. mask defaultreport Invoke this report. Multiple reports can be set. report footime-series How often to produce a report dump in seconds. time-series 60 </PRE></P><P><PRECLASS="SCREEN">global options Description/Example-------------------------------------------------------------------------include-tag Specify path to include tag definitions. include-tag /flows/tags/test1include-filter Specify path to include filter definitions. include-filter /flows/filters/test1include-mask Specify path to include mask definitions. include-filter /flows/masks/test1 </PRE></P><P><PRECLASS="SCREEN">Report type Summarization Key Elements.------------------------------------------------------------------------summary-detail Totals plus quick breakdown.summary-counters Totals only.packet-size Average packet size distribution.octets Octets per flow distribution.packets Packets per flow distribution.ip-source-port IP Source Port.ip-destination-port IP Destination Port.ip-source/destination-port IP Source/Destination Port pair.bps Bits/Second distribution.pps Packets/Second distribution.ip-destination-address-type IP class with ASM/SSM Multicast breakout.ip-protocol IP Protocol.ip-tos IP Type of Service.ip-next-hop-address IP Next Hop Address.ip-source-address IP Source Address.ip-destination-address IP Destination Address.ip-source/destination-address IP Source/Destination Address pair.ip-exporter-address IP Exporter Address.input-interface Input Interface.output-interface Output Interface.input/output-interface Input/Output Interface pair.source-as Source AS.destination-as Destination AS.source/destination-as Source/Destination AS.ip-source-address/source-as IP Source Addrss and Source AS.ip-destination-address/source-as IP Destination Address and Source AS.ip-source-address/destination-as IP Source Address and Destination AS.ip-destination-address/destination-as IP Destination Address and Destination AS.ip-source/destination-address/source-as IP Source/Destination Address and Source AS.ip-source/destination-address/destination-as IP Source/Destination Address and Destination AS.ip-source/destination-address/source/destination-as IP Source/Destination Address and Source/Destination AS.ip-source-address/input-interface IP Source Address and Input Interface.ip-destination-address/input-interface IP Destination Address and Input Interface.ip-source-address/output-interface IP Source Address and Output Interface.ip-destination-address/output-interface IP Destination Address and Output Interface.ip-source/destination-address/input-interface IP Source/Destination Address and Input Interface.ip-source/destination-address/output-interface IP Source/Destination Address and Output Interface.ip-source/destination-address/input/output-interface IP Source/Destination Address and Input/Output Interface.input-interface/source-as Input Interface and Source AS.input-interface/destination-as Input Interface and Destination AS.output-interface/source-as Output Interface and Source AS.output-interface/destination-as Output Interface and Destination AS.input-interface/source/destination-as Input Interface and Source/Destination AS.output-interface/source/destination-as Output Interface and Source/Destination AS.?? 快捷鍵說明
復制代碼
Ctrl + C
搜索代碼
Ctrl + F
全屏模式
F11
切換主題
Ctrl + Shift + D
顯示快捷鍵
?
增大字號
Ctrl + =
減小字號
Ctrl + -