<HTML
><HEAD
><TITLE
>flow-log2rrd</TITLE
><META
NAME="GENERATOR"
CONTENT="Modular DocBook HTML Stylesheet Version 1.73
"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
TEXT="#000000"
LINK="#0000FF"
VLINK="#840084"
ALINK="#0000FF"
><H1
><A
NAME="AEN1"
><SPAN
CLASS="APPLICATION"
>flow-log2rrd</SPAN
></A
></H1
><DIV
CLASS="REFNAMEDIV"
><A
NAME="AEN6"
></A
><H2
>Name</H2
><SPAN
CLASS="APPLICATION"
>flow-log2rrd</SPAN
>&nbsp;--&nbsp;Process the STAT: lines from <SPAN
CLASS="APPLICATION"
>flow-capture</SPAN
> and
<SPAN
CLASS="APPLICATION"
>flow-fanout</SPAN
> to RRD files.</DIV
><DIV
CLASS="REFSYNOPSISDIV"
><A
NAME="AEN12"
></A
><H2
>Synopsis</H2
><P
><B
CLASS="COMMAND"
>flow-log2rrd</B
>  [-p<TT
CLASS="REPLACEABLE"
><I
> rrd_path</I
></TT
>]</P
></DIV
><DIV
CLASS="REFSECT1"
><A
NAME="AEN17"
></A
><H2
>DESCRIPTION</H2
><P
>The <B
CLASS="COMMAND"
>flow-log2rrd</B
> utility processes the STAT lines
generated by <SPAN
CLASS="APPLICATION"
>flow-capture</SPAN
> and <SPAN
CLASS="APPLICATION"
>flow-fanout</SPAN
> and converts them into RRD files.  RRD's
are stored as rrd_path/capture|fanout.hostname.srcip.dstip.port.rrd.
The Datastores are flows,pkts,lost representing flows, packets, and lost
flows respectively.  Flow-fanout generates an additional DS nobufs
indicating the number of times a write() failed with ENOBUFS.</P
></DIV
><DIV
CLASS="REFSECT1"
><A
NAME="AEN23"
></A
><H2
>OPTIONS</H2
><P
></P
><DIV
CLASS="VARIABLELIST"
><DL
><DT
>-p<TT
CLASS="REPLACEABLE"
><I
> rrd_path</I
></TT
></DT
><DD
><P
>Path to store files.</P
></DD
></DL
></DIV
></DIV
><DIV
CLASS="REFSECT1"
><A
NAME="AEN31"
></A
><H2
>EXAMPLES</H2
><DIV
CLASS="INFORMALEXAMPLE"
><A
NAME="AEN33"
></A
><P
></P
><P
>Convert flow-capture STAT lines in /var/log/netflow to RRD's in /flows/rrd/.</P
><P
>    <B
CLASS="COMMAND"
>cat /var/log/netflow | flow-rpt2rrd -p /flows/rrd</B
></P
><P
></P
></DIV
></DIV
><DIV
CLASS="REFSECT1"
><A
NAME="AEN37"
></A
><H2
>BUGS</H2
><P
>Expects STAT lines every 5 minutes.  Hard coded to 7 days of 5 minute
averages and 365 days of 1 day averages.</P
></DIV
><DIV
CLASS="REFSECT1"
><A
NAME="AEN40"
></A
><H2
>AUTHOR</H2
><P
>Mark Fullmer
<TT
CLASS="EMAIL"
>&#60;<A
HREF="mailto:maf@splintered.net"
>maf@splintered.net</A
>&#62;</TT
></P
></DIV
><DIV
CLASS="REFSECT1"
><A
NAME="AEN47"
></A
><H2
>SEE ALSO</H2
><P
><SPAN
CLASS="APPLICATION"
>flow-tools</SPAN
>(1)</P
></DIV
></BODY
></HTML
>