<!DOCTYPE refentry PUBLIC "-//Davenport//DTD DocBook V3.0//EN">
<refentry>

<refmeta>
<refentrytitle>
<application>flow-send</application>
</refentrytitle>
<manvolnum>1</manvolnum>
</refmeta>

<refnamediv>
<refname>
<application>flow-send</application>
</refname>
<refpurpose>
Transmit flow data with the NetFlow protocol.
</refpurpose>
</refnamediv>

<refsynopsisdiv>
<cmdsynopsis>
<command>flow-send</command>
<arg>-h</arg>
<arg>-d<replaceable> debug_level</replaceable></arg>
<arg>-m<replaceable> privacy_mask</replaceable></arg>
<arg>-s</arg>
<arg>-x<replaceable> xmit_delay</replaceable></arg>
<arg>-V<replaceable> pdu_version</replaceable></arg>
<arg choice="req"><replaceable>localip/remoteip/port</replaceable></arg>

</cmdsynopsis>
</refsynopsisdiv>

<refsect1>
<title>DESCRIPTION</title>
<para>
The <command>flow-send</command> utility is used to transmit flows in NetFlow
format to a collector specified by localip/remoteip/port.
</para>
</refsect1>

<refsect1>
<title>OPTIONS</title>
<variablelist>

<varlistentry>
<term>-d<replaceable> debug_level</replaceable></term>
<listitem>
<para>
Enable debugging.
</para>
</listitem>
</varlistentry>

<varlistentry>
<term>-h</term>
<listitem>
<para>
Display help.
</para>
</listitem>
</varlistentry>

<varlistentry>
<term>-s</term>
<listitem>
<para>
Enable spoofing of source IP address.
</para>
</listitem>
</varlistentry>

<varlistentry>
<term>-m<replaceable> privacy_mask</replaceable></term>
<listitem>
<para>
Apply <replaceable>privacy_mask</replaceable> to the source and destination IP
address of flows.  For example a privacy_mask of 255.255.255.0 would convert
flows with source/destination IP addresses 10.1.1.1 and 10.2.2.2 to 10.1.1.0
and 10.2.2.0 respectively.
</para>
</listitem>
</varlistentry>

<varlistentry>
<term>-V<replaceable> pdu_version</replaceable></term>
<listitem>
<para>
Use <replaceable>pdu_version</replaceable> format when transmitting.
<literallayout>
    1    NetFlow version 1 (No sequence numbers, AS, or mask)
    5    NetFlow version 5
    6    NetFlow version 6 (5+ Encapsulation size)
    7    NetFlow version 7 (Catalyst switches)
    8.1  NetFlow AS Aggregation
    8.2  NetFlow Proto Port Aggregation
    8.3  NetFlow Source Prefix Aggregation
    8.4  NetFlow Destination Prefix Aggregation
    8.5  NetFlow Prefix Aggregation
    8.6  NetFlow Destination (Catalyst switches)
    8.7  NetFlow Source Destination (Catalyst switches)
    8.8  NetFlow Full Flow (Catalyst switches)
    8.9  NetFlow ToS AS Aggregation
    8.10 NetFlow ToS Proto Port Aggregation
    8.11 NetFlow ToS Source Prefix Aggregation
    8.12 NetFlow ToS Destination Prefix Aggregation
    8.13 NetFlow ToS Prefix Aggregation
    8.14 NetFlow ToS Prefix Port Aggregation
    1005 Flow-Tools tagged version 5
</literallayout>
</para>
</listitem>
</varlistentry>

<varlistentry>
<term>-x<replaceable> xmit_delay</replaceable></term>
<listitem>
<para>
Configure a microsecond transmit delay between packets.  This may be necessary in some configurations to prevent a transmit buffer overrun.
</para>
</listitem>
</varlistentry>

</variablelist>
</refsect1>

<refsect1>
<title>EXAMPLES</title>
<informalexample>
<para>
Transmit all flows in the directory /flows/krc4 to the collector at 10.0.0.1
listening on port 9500.
</para>
<para>
  <command>flow-cat /flows/krc4 | flow-send 0/10.0.0.1/9500</command>
</para>
<para>
Generate a test pattern of version 7 flows and send them to a collector at 10.0.0.1 listening on port 9500.
</para>
<para>
  <command>flow-gen -V7 | flow-send 0/10.0.0.1/9500</command>
</para>

</informalexample>
</refsect1>
<refsect1>
<title>BUGS</title>
<para>
It is not currently possible to convert between the aggregated formats (8.x)
and the non aggregated formats (1,5,6,7).
</para>
</refsect1>

<refsect1>
<title>AUTHOR</title>
<para>
<author>
<firstname>Mark</firstname>
<surname>Fullmer</surname>
</author>
<email>maf@splintered.net</email>
</para>
</refsect1>

<refsect1>
<title>SEE ALSO</title>
<para>
<application>flow-tools</application>(1)
</para>
</refsect1>

</refentry>
