is a program to read, filter and/or concatenate
binary log files.
arguments are specified,
will read each of the log files and print their contents to standard output.
Filtering may be performed by specifying a
In this mode,
will filter the flows it reads from the
file(s) before printing them.
option may be used to specify a
to which all the flows that have been read and passed any filters are written.
The command-line options are as follows:
Read only the first
of the file.
to read legacy version 2 flow logs (generated by
versions prior to v9.0).
This may be used to convert old flow logs to the newer form.
to report all timestamps in UTC rather than the local timezone.
Display debugging information, including the number of filter matches if one
has been specified.
containing filtering and field selection rules to apply to the flows that are
These rules may contain
directives and filter rules as described in the
manual (under the
Storage field selection
Any other directives are ignored.
directives are specified in the
then the default is to preserve all the fields in the input flow logs.
Operate quietly. If this argment is specified,
will not display the flows it is processing.
This may be useful in conjunction with the
to which all flows that have been read and have passed any filters are written.
The flows are written in the
binary log format.
This option is useful when filtering or concatenating flow log files.
Reports all information in the flow log, rather than the default brief subset.
Displays commandline usage information.