ft2nfdump man page

ft2nfdump — flow-tools data converter program

Synopsis

ft2nfdump [options]

Description

ft2nfdump is the flow-tools converter program to read, convert and store netflow data, created with the flow-tools package. It works either as a pipe filter or reads flow-tools data format directly from file and exports nfdump data format at stdout.

Options

-r <flow-tools-file>

Read flow-tools formated netflow data from file flow-tools-file. Default: Read from stdin.

-w <nfdump-file>

Write nfdump formated file for converted netflow data Default: Write to stdout.

-j

Compress flows. Use bz2 compression in output file. Space efficient methode

-z

Compress flows. Use fast LZO1X-1 compression in output file. Fastest method

-c num

Read only num flows from input file.

-E

Print raw netflow records to stdout. This option is for debugging purpose  only, to see any incoming netflow data. Compatible to option -E in nfcapd.

-V

Print ft2nfdump version and exit.

-h

Print help text on stdout with all options and exit.

Return Value

Returns

0   No error.

255 Conversion failed.

Examples

flow-cat ft-v05.2015-05-01.* | ft2nfdump -j -w nfcap.20150501 Convert files into nfdump format.

flow-cat ft-v05.2001-05-01.* | ft2nfdump | nfdump -w nfcap.20010501 Convert files into nfdump format.

ft2nfdump -r ft-v05.2001-05-01 | nfdump -w nfcap.20010501 Convert files into nfdump format.

Notes

See Also

nfcapd(1), nfdump(1), nfprofile(1), nfreplay(1)

Bugs

Info

2009-09-09