<HTML ><HEAD ><TITLE >flow-log2rrd</TITLE ><META NAME="GENERATOR" CONTENT="Modular DocBook HTML Stylesheet Version 1.73 "></HEAD ><BODY CLASS="REFENTRY" BGCOLOR="#FFFFFF" TEXT="#000000" LINK="#0000FF" VLINK="#840084" ALINK="#0000FF" ><H1 ><A NAME="AEN1" ><SPAN CLASS="APPLICATION" >flow-log2rrd</SPAN ></A ></H1 ><DIV CLASS="REFNAMEDIV" ><A NAME="AEN6" ></A ><H2 >Name</H2 ><SPAN CLASS="APPLICATION" >flow-log2rrd</SPAN > -- Process the STAT: lines from <SPAN CLASS="APPLICATION" >flow-capture</SPAN > and <SPAN CLASS="APPLICATION" >flow-fanout</SPAN > to RRD files.</DIV ><DIV CLASS="REFSYNOPSISDIV" ><A NAME="AEN12" ></A ><H2 >Synopsis</H2 ><P ><B CLASS="COMMAND" >flow-log2rrd</B > [-p<TT CLASS="REPLACEABLE" ><I > rrd_path</I ></TT >]</P ></DIV ><DIV CLASS="REFSECT1" ><A NAME="AEN17" ></A ><H2 >DESCRIPTION</H2 ><P >The <B CLASS="COMMAND" >flow-log2rrd</B > utility processes the STAT lines generated by <SPAN CLASS="APPLICATION" >flow-capture</SPAN > and <SPAN CLASS="APPLICATION" >flow-fanout</SPAN > and converts them into RRD files. RRD's are stored as rrd_path/capture|fanout.hostname.srcip.dstip.port.rrd. The Datastores are flows,pkts,lost representing flows, packets, and lost flows respectively. Flow-fanout generates an additional DS nobufs indicating the number of times a write() failed with ENOBUFS.</P ></DIV ><DIV CLASS="REFSECT1" ><A NAME="AEN23" ></A ><H2 >OPTIONS</H2 ><P ></P ><DIV CLASS="VARIABLELIST" ><DL ><DT >-p<TT CLASS="REPLACEABLE" ><I > rrd_path</I ></TT ></DT ><DD ><P >Path to store files.</P ></DD ></DL ></DIV ></DIV ><DIV CLASS="REFSECT1" ><A NAME="AEN31" ></A ><H2 >EXAMPLES</H2 ><DIV CLASS="INFORMALEXAMPLE" ><A NAME="AEN33" ></A ><P ></P ><P >Convert flow-capture STAT lines in /var/log/netflow to RRD's in /flows/rrd/.</P ><P > <B CLASS="COMMAND" >cat /var/log/netflow | flow-rpt2rrd -p /flows/rrd</B ></P ><P ></P ></DIV ></DIV ><DIV CLASS="REFSECT1" ><A NAME="AEN37" ></A ><H2 >BUGS</H2 ><P >Expects STAT lines every 5 minutes. Hard coded to 7 days of 5 minute averages and 365 days of 1 day averages.</P ></DIV ><DIV CLASS="REFSECT1" ><A NAME="AEN40" ></A ><H2 >AUTHOR</H2 ><P >Mark Fullmer <TT CLASS="EMAIL" ><<A HREF="mailto:maf@splintered.net" >maf@splintered.net</A >></TT ></P ></DIV ><DIV CLASS="REFSECT1" ><A NAME="AEN47" ></A ><H2 >SEE ALSO</H2 ><P ><SPAN CLASS="APPLICATION" >flow-tools</SPAN >(1)</P ></DIV ></BODY ></HTML >