<!DOCTYPE refentry PUBLIC "-//Davenport//DTD DocBook V3.0//EN">
<refentry>

<refmeta>
<refentrytitle>
<application>flow-log2rrd</application>
</refentrytitle>
<manvolnum>1</manvolnum>
</refmeta>

<refnamediv>
<refname>
<application>flow-log2rrd</application>
</refname>
<refpurpose>
Process the STAT: lines from <application>flow-capture</application> and
<application>flow-fanout</application> to RRD files.
</refpurpose>
</refnamediv>

<refsynopsisdiv>
<cmdsynopsis>
<command>flow-log2rrd</command>
<arg>-p<replaceable> rrd_path</replaceable></arg>
</cmdsynopsis>
</refsynopsisdiv>

<refsect1>
<title>DESCRIPTION</title>
<para>
The <command>flow-log2rrd</command> utility processes the STAT lines
generated by <application>flow-capture</application> and <application>
flow-fanout</application> and converts them into RRD files.  RRD's
are stored as rrd_path/capture|fanout.hostname.srcip.dstip.port.rrd.
The Datastores are flows,pkts,lost representing flows, packets, and lost
flows respectively.  Flow-fanout generates an additional DS nobufs
indicating the number of times a write() failed with ENOBUFS.
</para>
</refsect1>

<refsect1>
<title>OPTIONS</title>
<variablelist>

<varlistentry>
<term>-p<replaceable> rrd_path</replaceable></term>
<listitem>
<para>
Path to store files.
</para>
</listitem>
</varlistentry>

</variablelist>
</refsect1>

<refsect1>
<title>EXAMPLES</title>
<informalexample>
<para>
Convert flow-capture STAT lines in /var/log/netflow to RRD's in /flows/rrd/.
</para>
<para>
    <command>cat /var/log/netflow | flow-rpt2rrd -p /flows/rrd</command>
</para>
</informalexample>

</refsect1>


<refsect1>
<title>BUGS</title>
<para>
Expects STAT lines every 5 minutes.  Hard coded to 7 days of 5 minute
averages and 365 days of 1 day averages.
</para>
</refsect1>

<refsect1>
<title>AUTHOR</title>
<para>
<author>
<firstname>Mark</firstname>
<surname>Fullmer</surname>
</author>
<email>maf@splintered.net</email>
</para>
</refsect1>

<refsect1>
<title>SEE ALSO</title>
<para>
<application>flow-tools</application>(1)
</para>
</refsect1>

</refentry>
