One thing to note is that the new flow file will not be compressed,
IIRC.  You can save space by gziping the new flow file.

On Mon, Jan 02, 2012 at 08:55:48AM +0000, Craig Weinhold wrote:
> unioj,
> 
> Your original question was:
> 
> > I have retrieve some flow data by flow-print ,
> > But now how can I create a new netflow file to save these filter flow ?
> 
> so presumably you are already piping together a series of flow tools commands 
> (flow-cat, flow-merge, flow-filter, flow-nfilter, etc), ending with "| 
> flow-print"
> 
> Just replace the "| flow-print"  with "> ft-newfile" and those flows will be 
> saved to the file "ft-newfile" rather than printed to the terminal. You may 
> wish to google "unix redirection" to find articles describing how the |, >, 
> <, >>, and << commands work in linux. Then go back and re-read the flow-tools 
> man pages and look at its examples.
> 
> -Craig
> 
> ________________________________________
> From: [email protected] 
> [[email protected]] on behalf of uniojnqoifazy 
> [[email protected]]
> Sent: Monday, January 02, 2012 12:48 AM
> To: 'Michael W. Lucas'
> Cc: [email protected]
> Subject: RE: [Flow-tools] how can I create a new netflow file to save   these 
>   filter flow ?
> 
> Hi ml
> Are you mean
> # flow-cat ft-* | flow-nfilter  ft-v05.2010-05-09.190301+0800 >
> newfilter.txt
> But it's can work ,am I missing anything  ??
> 
> Cheers,
>   unioj
> -----Original Message-----
> From: Michael W. Lucas [mailto:[email protected]]
> Sent: Wednesday, December 28, 2011 10:56 AM
> To: uniojnqoifazy
> Cc: [email protected]
> Subject: Re: [Flow-tools] how can I create a new netflow file to save these
> filter flow ?
> 
> flow-cat ft-* | flow-nfilter ... > ft-newfile
> 
> ==ml
> 
> 
> On Wed, Dec 28, 2011 at 10:45:26AM +0800, uniojnqoifazy wrote:
> > Hi all,
> > Have any command line tool can do it ?
> >
> >
> > Cheers,
> > Unioj
> >
> > -----Original Message-----
> > From: Joe Loiacono [mailto:[email protected]]
> > Sent: Wednesday, December 28, 2011 1:33 AM
> > To: uniojnqoifazy
> > Cc: [email protected]; [email protected]
> > Subject: Re: [Flow-tools] how can I create a new netflow file to save
> these
> > filter flow ?
> >
> > Hi,
> >
> > You might try FlowViewer, a web-based front-end to flow-tools. It provides
> > for easy reports and adjusting of filters, graphing filtered data, and
> > maintaining long-term graph sets (ala MRTG) for specified filters. And,
> > with respect to your question, the ability to preserve filters for future
> > application.
> >
> > See: http://ensight.eos.nasa.gov/FlowViewer/
> >
> > Joe
> >
> >
> >
> > From: "uniojnqoifazy" <[email protected]>
> > To:   <[email protected]>
> > Date: 12/27/2011 03:50 AM
> > Subject:      [Flow-tools] how can I create a new netflow file to save
> > these
> >             filter flow ?
> > Sent by:      [email protected]
> >
> >
> >
> >
> >
> > Hi all,
> > I have retrieve some flow data by flow-print ,
> > But now how can I create a new netflow file to save these filter flow ?
> >
> >
> >
> > Cheers,
> > Unioj _______________________________________________
> > Flow-tools mailing list
> > [email protected]
> > http://mailman.splintered.net/mailman/listinfo/flow-tools
> >
> > _______________________________________________
> > Flow-tools mailing list
> > [email protected]
> > http://mailman.splintered.net/mailman/listinfo/flow-tools
> 
> --
> Michael W. Lucas
> http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/
> Latest book: Network Flow Analysis http://www.networkflowanalysis.com/
> [email protected], Twitter @mwlauthor
> 
> _______________________________________________
> Flow-tools mailing list
> [email protected]
> http://mailman.splintered.net/mailman/listinfo/flow-tools

-- 
Michael W. Lucas        
http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/
Latest book: Network Flow Analysis http://www.networkflowanalysis.com/
[email protected], Twitter @mwlauthor
_______________________________________________
Flow-tools mailing list
[email protected]
http://mailman.splintered.net/mailman/listinfo/flow-tools

Reply via email to