Name
flowmoncol - program for importing FlowMon probe data in NetFlow version 5 format
Synopsis
flowmoncol [-h] [-i interval] [-l port] [-c] [-m mode] [-v level]
Description
The flowmoncol program receives data from the FlowMon v5 exporter and create some simple statisctics over them.
flowmoncol is invoked to listen on default port 5000.
Options
-iinterval- Set the interval for statistic counting (in seconds).
-lport- Set the port to listening for netflow datagrams.
-c- For SQL mode print first the create table commands (simple use with sqlite).
-mmodeSets the running mode (modes can be binary combined, but this is not recommended for all modes).
1count total statistic only2count per protocol statistic4print per flow statistic (many many lines)8print SQL store command for each flow instead of statistic (don't mix with other modes)Table 1. SQL table
Name Type Description start Integer Flow start time as UNIX time finish Integer Flow end time as UNIX time src TEXT source ip address dst TEXT destination ip address packets Integer Number of packets octets Integer Number of octets (bytes) protocol Integer Protocol (TCP,UDP, ICMP) src_port Integer source port (if any) dst_port Integer destination port (if any) -h- Display program help.
-vlevel- Set the verbosity level (0 to 5).
