.\" $Id: flowprobe.8,v 1.2 2004-11-24 16:09:56 anton Exp $
.\" -*-nroff-*-
.TH flowprobe 8 "24 November 2004"

.SH NAME
flowprobe is a libpcap traffic collector and NetFlow packets originator 
for NeTAMS project.

.SH SYNOPSIS
.B flowprobe {options}

.SH DESCRIPTION
.B Flowprobe
is a part of NeTAMS (Network Traffic Accounting and Monitoring Software) 
project, a data source for NeTAMS daemon. It listens an ethernet interface 
(PCAP library, like tcpdump) and collects accconting data. Every N seconds it 
exports this data as NetFlow v5 UDP packet to any collector, for example
NeTAMS daemon with "data-source netflow" enabled.

.SH OPTIONS
.IP "-h" 
print help screen and exit 
.IP "-q" 
quiet output 
.IP "-d" 
turn debugging on 
.IP "-e export_to" 
IP address to export flows to, A.B.C.D:XXXX, where XXXX is remote port number
(default is 20001)
.IP "-r rule"
libpcap rule to capture packets
.IP "-i interface"
network interface to listen
.IP "-1 active_timeout"
active flow timeout (sec.), default is 600
.IP "-2 inactive_timeout"
inactive flow timeout (sec.), default is 60

.SH SYSTEM REQUIREMENTS
libpcap library and header file pcap.h must present in your system

.SH EXAMPLE
flowprobe -d -e 1.2.3.4:1000 -r ip -i eth0 -1 200 -2 20
.br
Exporting to:   1.2.3.4:1000
.br
Interface:      eth0
.br
Rule:           ip
.br
Active timeout: 200 seconds
.br
Inact timeout:  20 seconds
.br
Libpcap:        ethernet interface

.SH SEE ALSO
.BR http://www.netams.com

.SH AUTHORS
Anton Vinokurov <anton@netams.com>, Yuriy Shkandybin <jura@netams.com>