flow-merge1
Merge flow files.
Usage
flow-merge [-aghm]
[{-b
big | little}]
[-C
comment]
[-d
debug_level]
[-o
filename]
[-z
z_level]
[{file | directory ...}]
Overview
The flow-merge utility processes files and/or directories of files in the flow-tools format. The resulting merged data set is written to the standard output or file specified by -o. If file is a single dash (`-') or absent, flow-merge will read from the standard input. Unlike flow-cat, flow-merge interleaves flow records preserving the relative chronological order.
Options
-
-a -
Do not ignore filenames that begin with
tmp.
-
-b big|little -
Byte order of output.
-
-C Comment -
Add a comment.
-
-d debug_level -
Enable debugging.
-
-g -
Sort file list by capture start time before processing.
-
-h -
Display help.
-
-m -
Disable the use of mmap().
-
-p -
Preload headers. Use to preserve meta information such as lost flows.
-
-o file -
Write to
fileinstead of the standard out.
-
-z z_level -
Configure compression level to z_level. 0 is disabled (no compression), 9 is highest compression.
- file|directory...
-
Process the files and/or directory.
Examples
Merge all flow files begining with ft-v05.2001-05.01, use flow-print to display the results.
flow-merge ft-v05.2001-05-01.* | flow-print
Releases
Unchanged in 8 releases since Debian 3.1 (Sarge).