FLOW-LOG2RRD(1)

✨ FLOW-LOG2RRD ✨

okay bestie, gather round, because this one is a whole mood — it's flow-log2rrd, section 1 of the manual, and she is lowkey the glue holding your netflow stats together. no cap. 💖

---

🌸 NAME 🌸

flow-log2rrd — takes the STAT: lines that come out of flow-capture and flow-fanout and turns them into RRD files. it's giving pipeline princess. 👑

---

🦋 SYNOPSIS 🦋

flow-log2rrd [ -p rrd_path ]

---

💅 DESCRIPTION 💅

so like, the tea is this: the flow-log2rrd utility scoops up the STAT lines that flow-capture and flow-fanout generate, and converts them into RRD files. iconic behaviour honestly.

the RRD's get stored as:

rrd_path/capture|fanout.hostname.srcip.dstip.port.rrd

the Datastores are flows, pkts, lost — representing flows, packets, and lost flows respectively. yes bestie, lost flows get their own little spotlight, we love accountability. 💀

and flow-fanout goes the extra mile and generates an additional DS nobufs, which indicates the number of times a write() failed with ENOBUFS. main character energy, honestly. 😭

---

🎀 OPTIONS 🎀

• -p rrd_path — the path where the files get stored. that's it, that's the whole option menu. short and slay. ✨

---

🌈 EXAMPLES 🌈

want to convert flow-capture STAT lines living in /var/log/netflow into RRD's in /flows/rrd/? say less:

cat /var/log/netflow | flow-rpt2rrd -p /flows/rrd

bestie look at that command very closely — yes, the example in the original page calls flow-rpt2rrd, not flow-log2rrd. i'm not fixing it, i'm not renaming it, i'm not touching it. it's canon. 🙈

---

💀 BUGS 💀

• expects STAT lines every 5 minutes. no wiggle room, she has a schedule. ⏰
• hard coded to 7 days of 5 minute averages and 365 days of 1 day averages. so if you wanted something else… nope. that's baked in fr fr. 🫶

---

👑 AUTHOR 👑

Mark Fullmer <maf@splintered.net> — the legend, the blueprint, the moment. ⭐

---

💜 SEE ALSO 💜

• flow-tools(1)

---

and that's a wrap, bestie! this little page came to you courtesy of the 26 Август 2010 release energy, signed, sealed and archived. go forth and convert those STAT lines. slay responsibly 💖✨🎀