Man page or keyword search:   man All Sections 1 - General Commands 2 - System Calls 3 - Subroutines, Functions 4 - Special Files 5 - File Formats 6 - Games and Screensavers 7 - Macros and Conventions 8 - Maintenence Commands 9 - Kernel Interface New Commands Server 4.4BSD AIX Alpinelinux Archlinux Aros BSDOS BSDi Bifrost CentOS Cygwin Darwin Debian DigitalUNIX DragonFly ElementaryOS Fedora FreeBSD Gentoo GhostBSD HP-UX Haiku Hurd IRIX Inferno JazzOS Kali Knoppix LinuxMint MacOSX Mageia Mandriva Manjaro Minix MirBSD NeXTSTEP NetBSD OPENSTEP OSF1 OpenBSD OpenDarwin OpenIndiana OpenMandriva OpenServer OpenSuSE OpenVMS Oracle PC-BSD Peanut Pidora Plan9 QNX Raspbian RedHat Scientific Slackware SmartOS Solaris SuSE SunOS Syllable Tru64 UNIXv7 Ubuntu Ultrix UnixWare Xenix YellowDog aLinux   44335 pages apropos Keyword Search (all sections) Output format html ascii pdf view pdf save postscript

nfreplay(1)							   nfreplay(1)

NAME
       nfreplay - netflow replay program

SYNOPSIS
       nfreplay [options] [filter]

DESCRIPTION
       nfreplay	 is  the  netflow  replay  program of the nfdump tool set.  It
       reads data from files stored by nfcapd and sents the netflow data to  a
       host or a multicat group. The filter syntax is equivalent to nfdump. If
       a filter is supplied, only  the	matching  flows	 are  sent.   See  the
       nfdump(1) man page for a detailed description of the filter syntax. All
       records are sent as netflow version 5.

OPTIONS
       -H remotehost
	  Send all flows to this remote host. Accepts a	 symbolic  name	 or  a
	  IPv4/IPv6 IP address.	 Defaults to IPv4 localhost 127.0.0.1.

       -j mcastgroup
	  Join	this  multicast	 group	and send all flows to this group host.
	  Accepts a symbolic name or multicast IPv4/IPv6 IP address.

       -p port
	  Send all flows to this port on the remote side. Default is 9995.

       -4 Forces nfreplay to send flows to a IPv4 address only.	 Can  be  used
	  together  with  -i  if  the remote host has an IPv4 and IPv6 address
	  record.

       -6 Forces nfreplay to send flows to a IPv6 address only.	 Can  be  used
	  together  with  -i  if  the remote host has an IPv4 and IPv6 address
	  record.

       -v num
	  Send flows as netflow version	 num.  5  and  9  are  supported.  The
	  default  is  sending	the  flows  as netflow version 5. In version 5
	  mode, IPv6 flows, are skipped and 64bit counters  are	 truncated  to
	  32bit.

       -d usec
	  Delay	 each  record  by  usec mirco seconds, to avoid overrun on the
	  remote side. Default is 10.

       -b buffersize
	  Set send buffer size in bytes. Useful for large  data	 to  transfer.
	  Default is system dependent.

       -r inputfile
	  Read input data from inputfile. Default is read from stdin.

       -t timewin
	  Send	only  flows,  which  fall  in  the  time window timewin, where
	  timewin is YYYY/MM/dd.hh:mm:ss[-YYYY/MM/dd.hh:mm:ss]. Any  parts  of
	  the	time   spec   may   be	 omitted  e.g  YYYY/MM/dd  expands  to
	  YYYY/MM/dd.00:00:00-YYYY/MM/dd.23:59:59 and sends all	 flow  from  a
	  given day.

       -c num
	  Limit number of records to send to the first num flows.

       -V Print nfreplay version and exit.

       -h Print help text on stdout with all options and exit.

RETURN VALUE
       Returns
	   0   No error.
	   255 Initialization failed.
	   254 Error in filter syntax.
	   250 Internal error.

NOTES
SEE ALSO
       nfcapd(1), nfdump(1), nfprofile(1)

BUGS
				  2009-09-09			   nfreplay(1)

Vote for polarhome