GSP
Quick Navigator

Search Site

Unix VPS
A - Starter
B - Basic
C - Preferred
D - Commercial
MPS - Dedicated
Previous VPSs
* Sign Up! *

Support
Contact Us
Online Help
Handbooks
Domain Status
Man Pages

FAQ
Virtual Servers
Pricing
Billing
Technical

Network
Facilities
Connectivity
Topology Map

Miscellaneous
Server Agreement
Year 2038
Credits
 

USA Flag

 

 

Man Pages


Manual Reference Pages  -  NFREPLAY (1)

NAME

nfreplay - netflow replay program

CONTENTS

Synopsis
Description
Options
Notes
Bugs

SYNOPSIS

nfreplay [options] [filter]

DESCRIPTION

nfreplay is the netflow replay program of the nfdump tool set. It reads data from files stored by nfcapd and sents the netflow data to a host or a multicat group. The filter syntax is equivalent to nfdump. If a filter is supplied, only the matching flows are sent. See the nfdump(1) man page for a detailed description of the filter syntax. All records are sent as netflow version 5.

OPTIONS

-H remotehost
  Send all flows to this remote host. Accepts a symbolic name or a IPv4/IPv6 IP address. Defaults to IPv4 localhost 127.0.0.1.
-j mcastgroup
  Join this multicast group and send all flows to this group host. Accepts a symbolic name or multicast IPv4/IPv6 IP address.
-p port
  Send all flows to this port on the remote side. Default is 9995.
-4 Forces nfreplay to send flows to a IPv4 address only. Can be used together with -i if the remote host has an IPv4 and IPv6 address record.
-6 Forces nfreplay to send flows to a IPv6 address only. Can be used together with -i if the remote host has an IPv4 and IPv6 address record.
-v num
  Send flows as netflow version num. 5 and 9 are supported. The default is sending the flows as netflow version 5. In version 5 mode, IPv6 flows, are skipped and 64bit counters are truncated to 32bit.
-d usec
  Delay each record by usec mirco seconds, to avoid overrun on the remote side. Default is 10.
-b buffersize
  Set send buffer size in bytes. Useful for large data to transfer. Default is system dependent.
-r inputfile
  Read input data from inputfile. Default is read from stdin.
-t timewin
  Send only flows, which fall in the time window timewin, where timewin is YYYY/MM/dd.hh:mm:ss[-YYYY/MM/dd.hh:mm:ss]. Any parts of the time spec may be omitted e.g YYYY/MM/dd expands to YYYY/MM/dd.00:00:00-YYYY/MM/dd.23:59:59 and sends all flow from a given day.
-c num
  Limit number of records to send to the first num flows.
-V Print nfreplay version and exit.
-h Print help text on stdout with all options and exit.

RETURN VALUE

Returns
0 No error.

255 Initialization failed.

254 Error in filter syntax.

250 Internal error.

NOTES

SEE ALSO

nfcapd(1), nfdump(1), nfprofile(1)

BUGS

Search for    or go to Top of page |  Section 1 |  Main Index


NFREPLAY (1) 2009-09-09

Powered by GSP Visit the GSP FreeBSD Man Page Interface.
Output converted with manServer 1.07.