This is automatically generated documentation. Edit after the "COMMENTS" heading; changes to the main body will be lost.
FromNetFlowSummaryDump -- Click element; reads packets from a NetFlow summary file
FromNetFlowSummaryDump(FILE [, KEYWORDS])
Ports: no inputs, 1 output
Package: analysis (core)
Reads IP packet descriptors from a file containing NetFlow data, in the ASCII summary format described below, then creates packets containing info from the descriptors and pushes them out the output. Optionally stops the driver when there are no more packets. FILE may be compressed with gzip(1) or bzip2(1); FromNetFlowSummaryDump will run zcat(1) or bzcat(1) to uncompress it. Keyword arguments are:
active' handler is written). Default is true.
Packets generated by FromNetFlowSummaryDump always have IP version 4 and IP header length 5. The rest of the packet data is zero or garbage, unless set by the dump. Generated packets will usually have incorrect checksums. The link annotation is equal to one of the interface numbers, or a combination of both.
FromNetFlowSummaryDump reads line-oriented ASCII files. Blank lines, and lines
starting with `
!' or `
#', are ignored. Data lines contain 15 or more
fields separated by vertical bars `
|'. FromNetFlowSummaryDump pays
attention to some of these fields:
Field Meaning Example ----- ---------------------------- ---------- 0 Source IP address 22.214.171.124 1 Destination IP address 126.96.36.199 3 Input interface number 14 4 Output interface number 16 5 Packet count in flow 5 6 Byte count in flow 10932 7 Flow timestamp (UNIX-style) 998006995 8 Flow end timestamp 998006999 9 Source port 3917 10 Destination port 80 12 TCP flags (OR of all pkts) 18 13 IP protocol 6 14 IP TOS bits 0
Generated packets have both their "first timestamp" and timestamp annotations set. The timestamp annotation is set to the flow end timestamp unless that was zero, in which case it is set to the flow timestamp. The "first timestamp" annotation is always set to the flow timestamp. FromNetFlowSummaryDump is a notifier signal, active when the element is active and the dump contains more packets.
Generated by 'click-elem2man' from '../elements/analysis/fromnetflowsumdump.hh' on 24/May/2007.