FLOW-PRINT(1)

πŸ“¦ version 0.68.5.1, in fedora 43, fedora 44

πŸ’– flow-print β€” a whole manual, but make it cute πŸ’–

okay bestie, listen. this is flow-print, and it lives in section 1 of the manual (that's the "commands you actually type" section, iykyk). it's giving flow-tools energy, and it's here to make your flow data look ✨pretty✨ in plain ASCII. let's go. πŸ¦‹


✨ NAME ✨

flow-print β€” display flows in formatted ASCII. no cap, that's literally the whole job. πŸ’…


🌸 SYNOPSIS 🌸

flow-print [ -hlnpw ]  [ -d debug_level ]  [ -f format ]

look at her. so compact. so slay. ⭐


πŸŽ€ DESCRIPTION πŸŽ€

the flow-print utility will display flow data in ASCII using pre-defined formats selectable with -f. that's the whole vibe: you feed her flows, she gives you a table. obsessed. 🫢

some of the less descriptive column headers are defined below, because ngl a few of these are giving cryptic. πŸ™ˆ

  • Sif β€” Source Interface ifIndex.
  • DiF β€” Destination Interface ifIndex.
  • Pr β€” Protocol.
  • P β€” Protocol.
  • SrcP β€” Source Port.
  • DstP β€” Destination Port.
  • Pkts β€” Packets.
  • Octets β€” Octets (Bytes).
  • Active β€” Time in ms the flow was active.
  • B/Pk β€” Bytes per Packet.
  • Ts β€” Type of Service.
  • Fl β€” Flags, for TCP the cumulative or of the TCP control bits.
  • srcAS β€” Source AS.
  • dstAS β€” Destination AS.
  • Start β€” Start time of the flow.
  • End β€” End time of the flow.
  • router_sc β€” V7 IP address of router producing shorcuts.
  • peer_nexthop β€” V6 IP address of peer next hop IP address.
  • encap i/o β€” Version 6 only. Encapsulation size in/out
  • duration β€” Time in ms the flow was active.
  • input β€” Input Interface ifIndex.
  • output β€” Output Interface ifIndex.
  • flows β€” Number of aggregated flows.
  • mTos β€” V8.x ToS of pkts that exceeded the contract.
  • xpackets β€” V8.x Packets that exceed the contract.

main character reference sheet tbh. πŸ“‹βœ¨


πŸ’… OPTIONS πŸ’…

  • -d debug_level β€” Enable debugging. (turn on the little detective hat πŸ”)
  • -f format β€” Select format. The default is appropriate for the export type of the flow data. Available formats are:
    • 0 β€” 1 line, interfaces, hex ports
    • 1 β€” 2 line (includes timing and flags)
    • 2 β€” 2 line candidate TCP syn attack flows
    • 3 β€” 1 line, no interfaces, decimal ports
    • 4 β€” 1 line with AS number
    • 5 β€” 1 line, 132 column
    • 6 β€” show ip accounting emulation
    • 7 β€” 1 line, 132 column +router_id
    • 8 β€” 1 line, 132 column +encapsulation
    • 9 β€” 1 line with tag values
    • 10 β€” AS aggregation
    • 11 β€” Protocol Port aggregation
    • 12 β€” Source Prefix aggregation
    • 13 β€” Destination Prefix aggregation
    • 14 β€” Prefix aggregation
    • 15 β€” Destination aggregation (Catalyst)
    • 16 β€” Source Destination aggregation (Catalyst)
    • 17 β€” Full Flow (Catalyst)
    • 18 β€” ToS AS Aggregation
    • 19 β€” ToS Proto Port aggregation
    • 20 β€” ToS Source Prefix aggregation
    • 21 β€” ToS Destination Prefix aggregation
    • 22 β€” ToS Prefix Aggregation
    • 23 β€” ToS Prefix Port aggregation
    • 24 β€” Full (Catalyst)

twenty-five formats. TWENTY-FIVE. she's versatile, she contains multitudes, she ate and left no crumbs. πŸ”₯

  • -h β€” Display help. (she's helpful AND hot πŸ’)
  • -l β€” Unbuffer output.
  • -n β€” Use symbolic names where appropriate.
  • -p β€” Display header information.
  • -w β€” Wide output.

🌈 EXAMPLES 🌈

display flows in flowfile:

flow-print < flowfile

that's it. that's the whole thing. redirect and go, bestie. 🧚


πŸ“ FILES πŸ“

configuration files: Symbols - /etc/flow-tools/sym/*.

(yes, the star is a glob. she's flexible. ✨)


πŸ’€ BUGS πŸ’€

None known.

literally flawless. not me being suspicious about that but okay, we move. πŸ‘‘


πŸŽ€ AUTHOR πŸŽ€

Mark Fullmer <maf@splintered.net>

the icon. the legend. the moment. 🫢


⭐ SEE ALSO ⭐

flow-tools(1)


and that's the whole page, babe. this one's from flow-tools, and the footer date on the original is 26 Август 2010 β€” so yeah, vintage, but she still serves. πŸ’–

πŸ“¦ where this page comes from