# PaCkAgE DaTaStReAm fprobe 1 272 # end of header 0707010008abee000081a40000000000000000000000014e2cc6240000010d0000010000010007ffffffffffffffff0000000f00000000fprobe/pkginfoPKG=fprobe NAME=fprobe 1.1 SPARC 64bit Solaris 10 VERSION=1.1 PSTAMP=25th July 2011 VENDOR=Slava Astashonok EMAIL=http://sourceforge.net/projects/fprobe/ DESC=NetFlow traffic probes ARCH=sparc CATEGORY=utility CLASSES=none BASEDIR=/ ISTATES=S s 1 2 3 RSTATES=S s 1 2 3 0707010008abed000081a40000000000000000000000014e2cc624000001c40000010000010007ffffffffffffffff0000000e00000000fprobe/pkgmap: 1 272 1 d none /usr ? ? ? 1 d none /usr/local ? ? ? 1 d none /usr/local/sbin 0755 root root 1 f none /usr/local/sbin/fprobe 0755 root root 115728 23118 1311557149 1 d none /usr/local/share 0755 root root 1 d none /usr/local/share/man 0755 root root 1 d none /usr/local/share/man/man8 0755 root root 1 f none /usr/local/share/man/man8/fprobe.8 0644 root root 7414 61902 1311557149 1 i checkinstall 785 2565 1311557155 1 i pkginfo 269 21249 1311557156 07070100000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000b00000000TRAILER!!!0707010008abee000081a40000000000000000000000014e2cc6240000010d0000010000010007ffffffffffffffff0000000800000000pkginfoPKG=fprobe NAME=fprobe 1.1 SPARC 64bit Solaris 10 VERSION=1.1 PSTAMP=25th July 2011 VENDOR=Slava Astashonok EMAIL=http://sourceforge.net/projects/fprobe/ DESC=NetFlow traffic probes ARCH=sparc CATEGORY=utility CLASSES=none BASEDIR=/ ISTATES=S s 1 2 3 RSTATES=S s 1 2 3 0707010008abed000081a40000000000000000000000014e2cc624000001c40000010000010007ffffffffffffffff0000000700000000pkgmap: 1 272 1 d none /usr ? ? ? 1 d none /usr/local ? ? ? 1 d none /usr/local/sbin 0755 root root 1 f none /usr/local/sbin/fprobe 0755 root root 115728 23118 1311557149 1 d none /usr/local/share 0755 root root 1 d none /usr/local/share/man 0755 root root 1 d none /usr/local/share/man/man8 0755 root root 1 f none /usr/local/share/man/man8/fprobe.8 0644 root root 7414 61902 1311557149 1 i checkinstall 785 2565 1311557155 1 i pkginfo 269 21249 1311557156 0707010008abf8000041ed0000000000000000000000024e2cc624000000000000010000010007ffffffffffffffff0000000800000000install0707010008abf9000081ed0000000000000000000000014e2cc623000003110000010000010007ffffffffffffffff0000001500000000install/checkinstall#!/bin/sh # expected_bits="64" expected_release="5.10" expected_platform="sparc" # release=`uname -r` platform=`uname -p` bits=`isainfo -b` # if [ ${platform} != ${expected_platform} ]; then echo "\n\n\n\tThis package must be installed on a ${expected_platform} architecture\n" echo "\tAborting installation.\n\n\n" exit 1 fi if [ ${release} != ${expected_release} ]; then echo "\n\n\n\tThis package must be installed on a ${expected_release} machine\n" echo "\tAborting installation.\n\n\n" exit 1 fi if [ ${bits} != ${expected_bits} ]; then echo "\n\n\n\tThis package must be installed on a ${expected_bits} bit machine\n" echo "\tYour machine is running a ${bits} bit O.S. currently\n" echo "\tAborting installation.\n\n\n" exit 1 fi exit 0 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 @P@8@@@XHHHH8 5h/usr/lib/sparcv9/ld.so.1  #%'(*,-.0125679;<?ACDIJMOPRSTVXY[\^acdgijlmnpstuvwxy|}~ !"$&)+/348:=>@BEFGHKLNQUWZ]_`befhkoqrz{0 O%.@5<0Yu0ܜ€`H0 5 * X6 H`cj@oz"@ X0b$0xBcj Fdv( 0X0h0`0ܰ 3 9 W disx| @0Ȩ@ @  7h#+4`;E X0m 8w 0 (080„5 ;@G ;L0Pb`ls*(0ܔˆ0p0t  8P030O`Vc Y-hH~@0Ƞ @0ܘ  )RJ0bi  Y hX'0|Kl <v{@t!x0<`*0°    @@ 20 S0܈ r0  0ܐ 0ܬ    )0ܠ 1 C` d {X  9@` 0¤   0l   0 .@ 6 \ H 88 c m u S@  0  <   <   @  0 '0Ȱ ? Y0ȸ p\ 0̀  6 0 0@ z  0ܨ  €  (\  $0 9 8`\ B0 _ 9, i` s ` x0̈ &  NxD 0 ` 0`  0.0 P0¨l0$0` $XAoAMiKbYMLO0EL.killedscan_threadsetreuidfclosechroot$XAoAMiKbYMLO0EL.pidfilepath$XAoAMiKbYMLO0EL.emit_mutextotal_elements$XAoAMiKbYMLO0EL.sched_minsyslog$XAoAMiKbYMLO0EL.netflow__environ_lockdlt$XAoAMiKbYMLO0EL.scan_condmem_free$XAoAMiKbYMLO0EL.emit_rate_bytes_startgetaddrinfomy_log_openpthread_attr_initpthread_attr_setschedparamcallockillsetsockoptsprintf__fsr_init_value$XAoAMiKbYMLO0EL.filter_get_exit_frame_monitorpthread_mutex_unlockmy_getopt$XAoAMiKcYMLOUHL.crc16_table$XBoAMiKcYMLOUKL.my_getopt.my_opterr$XAoAMiKcYMLOUJL.element_size$XAoAMiKbYMLO0EL.link_layer_sizesscanfemit_thread$XAoAMiKbYMLO0EL.flows$XAoAMiKbYMLO0EL.pidfile$XAoAMiKcYMLOUJL.limit_memory$XAoAMiKbYMLO0EL.promiscpcap_loopsrand$XAoAMiKbYMLO0EL.unpending_timeout_end__1cG__CrunMdo_exit_code6F_v_fopen$XAoAMiKbYMLO0EL.emit_timeout_lib_versionatoisetgroups_environfill_DYNAMIC$XAoAMiKbYMLO0EL.bulk_quantity$XAoAMiKbYMLO0EL.start_time_offsetvsnprintfgetpidhashpthread_attr_setschedpolicypthread_cond_signal_finisighandlersetvbufsetregidsetsidsigactionpthread_mutex_init$XAoAMiKbYMLO0EL.devmem_allocmem_init$XAoAMiKbYMLO0EL.scan_mutexpthread_detach$XAoAMiKbYMLO0EL.off_tl$XAoAMiKbYMLO0EL.emit_cond$XBoAMiKcYMLOUKL.my_getopt.flag$XAoAMiKbYMLO0EL.link_layer$XAoAMiKbYMLO0EL.sched_maxfreadsigemptysetfind$XAoAMiKbYMLO0EL.thidsigaddsetoptind$XAoAMiKcYMLOUGL.NetFlow5_Flow$XAoAMiKcYMLOULL.my_log_flags$XAoAMiKbYMLO0EL.sigs$XAoAMiKcYMLOUJL.mem_index_table_size$XAoAMiKcYMLOUJL.bulk_quantitygetuptime$XAoAMiKbYMLO0EL.pending_head$XAoAMiKbYMLO0EL.npeers_rotmallocpcap_compilemain_GLOBAL_OFFSET_TABLE_pcap_datalinkgettime$XAoAMiKbYMLO0EL.flows_emitcloselogatexitpcap_open_livetotal_memory$XAoAMiKbYMLO0EL.flows_mutexstrchrfprintf$XAoAMiKcYMLOUGL.NetFlow1_Header$XAoAMiKcYMLOUGL.NetFlow7_Header$XAoAMiKcYMLOUHL.shuffle_table$XAoAMiKcYMLOUJL.mem_mutexpcap_threadpthread_create$XBoAMiKbYMLO0EL.main.threadsoptargpcap_filenosocketpcap_lookupdevchdirfreeaddrinfo$XAoAMiKbYMLO0EL.parmssched_get_priority_max$XAoAMiKcYMLOUJL.element_table_size$XAoAMiKbYMLO0EL.unpending_mutexhash_initsendstrlenpthread_sigmaskforkfcntl$XAoAMiKbYMLO0EL.sockbufsize$XAoAMiKcYMLOUGL.NetFlow7_Flow$XAoAMiKbYMLO0EL.emit_timemy_log_closepthread_mutex_lock$XAoAMiKcYMLOULL.my_log_names$XAoAMiKbYMLO0EL.emit_rate_delay$XAoAMiKcYMLOULL.my_log_indent$XAoAMiKbYMLO0EL.pending_tail$XAoAMiKbYMLO0EL.pw$XAoAMiKcYMLOULL.my_log_min_levelfree_elements$XAoAMiKbYMLO0EL.verbosity$XAoAMiKbYMLO0EL.log_dest$XAoAMiKbYMLO0EL.unpending_cond__xargvpcap_open_offline$XAoAMiKbYMLO0EL.active_lifetimepthread_setconcurrency$XAoAMiKbYMLO0EL.frag_lifetimehash_flow$XAoAMiKbYMLO0EL.snmp_output_indexpcap_setfilter___errno$XAoAMiKcYMLOUJL.malloc_sizegetpwnampcap_geterr$XAoAMiKbYMLO0EL.emit_packetconnect$XAoAMiKbYMLO0EL.pending_queue_length_etextnanosleepfreopenpcap_callbackmemset$XAoAMiKbYMLO0EL.scan_frag_dregput_intoopenlogcrc16$XAoAMiKcYMLOUGL.NetFlow5_Header__iob$XAoAMiKbYMLO0EL.scan_interval___Argv$XAoAMiKbYMLO0EL.off_nl$XAoAMiKbYMLO0EL.npeers_PROCEDURE_LINKAGE_TABLE_$XAoAMiKbYMLO0EL.peers$XAoAMiKbYMLO0EL.inactive_lifetime$XAoAMiKcYMLOUJL.rootusage$XAoAMiKbYMLO0EL.emit_sequence$XAoAMiKbYMLO0EL.sig_mask$XAoAMiKbYMLO0EL.ident__xargc_exit_edatamy_logstrerror$XAoAMiKbYMLO0EL.pidcmpmtime$XAoAMiKbYMLO0EL.pcap_handlecopy_flowinet_ntoabind$XBoAMiKcYMLOUKL.my_getopt.optstring$XAoAMiKcYMLOUGL.NetFlow1_Flowunpending_threadNetFlow1sched_get_priority_min$XAoAMiKcYMLOUHL.crc16_polyNetFlow5$XAoAMiKbYMLO0EL.start_time$XAoAMiKbYMLO0EL.snmp_input_index$XAoAMiKbYMLO0EL.emit_count$XAoAMiKbYMLO0EL.schedpNetFlow7selectpthread_cond_timedwaitremovegettimeofdaystrcatlibrt.so.1SUNW_1.1libnsl.so.1SUNW_0.7libsocket.so.1SUNW_1.4libc.so.1SUNW_1.18SUNWprivate_1.1libpcap.so.1/usr/local/lib:/lib/64:/usr/lib/64:/lib:/usr/lib =' =( ='y NqxT r- ej @`}=) @`y2i @~`]#wt @`B@:u @f`a^ D@P`SCv @<`pI3A .@`s O@b`* d@9`  [`+p  7@ "``+p  7@ r``+p .@ ra, @`+p '. \x tx+``+p ). -`-! `?-! =--%! !#0@ڐ`+p & @Ӑ"`*p . Z! `*p . Z!@@@ǔ@@@A@`tw``] `]`]?4 b] bX]D c ]D @@@s@ @A@cw'H c@]D  c@]$`HG O0w@x__t`__t`0ww_] _]`$,p ,p$,p$] ]`$@l#w_0A@blww_`]@֒'4 @w_D X H_@ H7_@ H74 @ww__D`$_ _ D`$_ _,`_ _,`_ _,`_ _4` _ _4` _ _4`_\ _t`_\ _t` _\ (_t`(_\ 0_t`0_ 8_ 8\t`\t`_ H_ H\t`\t`_D X_$`X www_瀤h_\ w_hK_ _ H:_ _ H3_ _ H,H_ _ H _ _ HH$H_ _ HHH _D X_D X@ O O_ `w_\ `w_o_瀤h__t`_w_߰ A@bww' '_7,p,pcx]@@F,0b]@w,0b]\@_א@kw_߀h*G H@nw_߀h __ߐ@_wH?H',0b]\@_t``_,0b]t@H_ H_ߠ H@ h _ H_ߢ H\t`\t`_ 8_ߠ 8@} h _ 8_ߢ 8\t`\t`_ߦ  _ @,_ߦ \_\ @t_ߦ \_\ @t_D X HL_D X H _ _4` _ _4`_D X H_\ 0_t`0_ߦ XD_D X@$_ߦ (\_\ (@t_D X H#_\`(\`0 h_\ `_t`,p,pcx]@@ _4` _ߢ XD` ?$`_ߐ# 'G H_@,p,pcx]@@uG'G< A@bw'wwwߠ 'GH\H_ _$`_ߠ wHI_ _$`_ߠ wH@`] < _4`_ߠ wH4`(] < _4`_ߠ wH(_\ _$`_ߠ wH_\ _$`_ߠ wH_ 8_$ _ߠ wH _ H_$ _ߠ wH_ _4`_ߠ wH_ _4`_ߠ wH_ _,`_ߠ wH_ _,`_ߠ wH_ _,`_ߠ wHb`]\  < _4`_ߠ wH`] < _4`_ߠ wHc]__$ _ߠ wHc]\ _$`_ߠ wHc]\ ,p ,p$,p$_$`_ߠ wH_$ _ߠ wH _,`_ߠ wH _4`_ߠ wH|_$ _ߠ wHu`]_Gӡ,p @@&@B Hd_Gӡ,0@`H%` O, < #b_ǠDcH&cH`&H `O9`O+OO`'OO%c逤 O, < #b_ǠD#c)@H%c O, < #b$_ǠD!#)%@ O, < #b0_ǠDGӠ 'GGO_w_װD\h\||@t@\|\|A@`Lw ' 'b`]\  `8]@wwbH]@ch]\ h0א@_b]D @wc]bH]ǐ@@H`] H bH]@H`ch]\ och]\ wch]\ \ `ch]t`bH]@r`] H`]ڐ`]\ b]\ $@`]t`b`]\  < b`]\ \ (__@w_@q`]  `]$``] b`]\  H1c]b`]\  < b`]\ \ `8]@wb`]\  `] b`]\  L@' ' '`x]D H`]\ Gå,p,p,pD $ HH`]\ Gå,p,p,pD $ HG'G 'G'GGHb`]\  H`]\ Gå,p,p,p (b`]\  `8]$@`]\ Gå,p,p,pD`8]G@@ 'GGH`]\ Gå,p,p,p (w_`] @$bx] HHGG@'G4 bx] t@'GH4G4 bx] t@L$@'wc] G4 L@4wϠǐ@b?H@eB Hǐ@U?H@XB OGà 'G`x]D O2c`]D HG c`]D <`@.! L$@'`] `] @`]$` `]$`O@ A@`̮wwc]@c]\ D X! @H!' ת@@Ȓ_b]D @w`]c]@@ϔc]\ D XOc]\ T Hc]\ $ Xc]\ \ `c]t`OA@clwwb]@_`h] @wbp]b]@@ 'G,p,pcx]@@dG,0b]\@wG,0b]@w_瀤hn_D X H+__\ H$@` ]D h_\ `_t` _4` _ XD` ?$``P]\ _t``_`P]t`_\ wH>H6__\ H$@`]D h _\`H\`8$`]D h _\ `_t`bH]@ch]\ _t``_ch]t`bH]@_\ wH_ `w_\ `w_瀤oG,p,pcx]@@G 'G#@Ohch]\ hc]@`P]\ h`P]\ w_\ ``P]t`_V `P]\ oO#A@cwwwwb8]D HH>_`p]D @w_ `p]D 4 $@'Gǀ H _ 4  ,08408< HHcX]\ D XHHcX]\ wc]D H_ H'_ '_t` _ߢ _D`$_ߢ _Ϥ D`$_ _,`_ _,` _4`  _,` _t`_t (_t 0_\ _t`8_\ _t`@_Ϧ`8`H\t`\t`_ !<,@, '_ ,08408< , c]$`_c]D @w_ c]D $@< _t`(Gc]D $@'_\ (< H_t (G_\ (< H_\ ('_ !<@H_Ϣ XD` $`_ _4` _ ! @H _Ϣ XD` $`G_\`(t`0GˀH=Gǀ H9H%_ _4` _ _4`H_ _4` _ _4`H  _4`  _4`H_Ϣ XD` $`H_ < H OOO OO_  HGˀ HGGˠ  H _Gˠ @ _,`cX]\ D X! @cX]\ $`XcX]\ \ `cX]t``]@@A@bDw`]\ `H]@?@p` ]@[B @p @@`]D @l 㻰A@aw'www '@^ bX]$ @` c ]$ G  @^_  0@X '_ 'c 'g b]$`G_c]@@ 'G?HHH G ?O hOG_c]@@ Ք'G?Oc]D!p$ ' G c]$apG 4 b]$`c]\ b]t`b]\ hb]\ L -H `]$`c]D!H c]\!@'H!'c]D!ЀH c]\!@ݐ2 `h]$`c]D H c]\ @ː` ]$ c]D hH c]\ p@`]$ c]D H c]\ @`]$ c]D!XH@H(`]b`]t`H5H3`]b`]t`H*``]!`(]`0]@@@ Hc]\!`@p H OOO OOc]D"H c]\" @S2 `]$`c]D!(HFc]\!0@H :w_h _,`_ w_L H`8]_@@7`]@@8c]\!0L H c]\!0@2 `]$`_h_$ w :_,``]@ @#w_b@]t`_h``]!`@]@B @@@h@V b@]\ `H]`P]`]@@ܖc]D!H$c]\!@2 `@]$``@] H``]!`(]`X]@@-@ c]D!H9c]\!@`]$ `]D H(`]D bX]D H `]D c ]D H``]!`(]``]@@@ݐ c]D H c]\ (@X* c]$`c]D 8H+c]\ @@F2 b]$`b]  H b] ?H``]!`(]`h]@@@ c]D!@H c]\!H@* 'c]D"0Hc]\"8`p]`]`(]@@+ H `] `(]$`c]D!耤Hc]\!`p]bx]c]@@c]D H-c]\ _W@@H``]!`(]`x]@@<@* H _W\ G `@O$_W@c]D H c]\!@b]$ c]D!c]$`c]D"H6c]\"@ǐw_c]t`_h&@3B H @-B @BHw`]w``]!`]c]\"_@@ۖ@ɐ Gc0]D $@`x]$``x]D H`x]D ,p,p,p@[w_`]t`_hO8c0]D ' `x]$`GGH_G,0\@w_ϐ@ :w_ǀhH _,`_Ǡ wǐ  @N 'G H``]!`]@B @Ő@@p@^ G`]\ `x]D ,p,p,p$`]\ `x]D ,p,p,p$ $G`]\ `x]D ,p,p,p  `O$`]\ `x]D ,p,p,p$ (_ǐ@ /w_ht _,`_ w_@ /w_h: _,`_ wH!H0 `]\ `x]D ,p,p,p$`$c`]D  c`]$`HHt_L mH OOO rOO_L H(__W@@HO_W\ `]\ `x]D ,p,p,p  `O$_W@iG`]\ `x]D ,p,p,p @m H``]!`]@B @ސ@@@w __Ǥ_W@@.H``]!`]`x]D  @@k@Y _W\ `]\ `x]D ,p,p,p  `O$_W@G`]\ `x]D ,p,p,p @ H``]!`]@hB @}@@(@ _h_$ w /_,`_h_$ w /_,`_Ǡ$ wǠ :_,`G '`x]D 'G `x]$`G'GGOY`]`] `] @@ `] HUHF``]!`]@ B @"@@͔@ @`]`]``]@@`]`]``] @@`]`]``]!@@H@ H @?O OOH``]  @|``]! @s@y`]$ `]`]D @@`]@@b]\ h@`w_b]t`_h `] @@ @4 b]\ L -H!b]\ @@D`]t `]\ h `] @@ @ HOb]\ Gb] < @#@$`]t `]\ h `] @@ ˔@ c]D H"`]\ @ c]?c@  H`]@B @% @@ `]\ @' 'G,p,pbh]D@GH G,p,pbh]D@?HG,p,pbh] @< `p]$`G'HG 'Ob]D H b]D `p]$``p]D ?H `]G @@ M@i c]\ hNc]\ b]t``]\ b]\ @ @ ?Ha]`]\ @b]\  @@ @3 `]\ א@@?Ha]`]\ @o @@@ Ha] @@b] G4  h@@ ''@G,p,pcx]@@VG 'GO!b]t``]@Iw_cX]t`_hH(cX]\ c]t``@] $ 'G'G$ 'G'GH2@"w_c]\ t``_ha]@ B @  @@@  c]\ \ `c]t`G'G$ 'G'GOcX]\ c]\ t``cX]\ c]t``]@b]w'`]/ `@O$ '`]@Ӓ  @֔`] @הHa ]@ B @  @@)@ E a(]`] @@c]D PH&c]\ X@H a0]@Ha8]c]@ c\ XB @ x @@@  @ `]D $ `]$`?@ '`]D H"?@ H ?`]@@Ha@]@ +B @ @ @@@ ِ c(]?G,0c]\@@HaH]@ B @  @@@  c(] @r`]D  `]$`G 'G Oc]\ h_ @` HaP]@ B @  @@j@  c]\ D c]\ D @@IHaX]c]\ @ D B @ ʐ @@F@ b c]\ D c]\ D @@-Ha`]c]\ @ D B @  @@"@ > b@]\ `]@@w_b]t`_hah]@ mB @  @@Hb]\ ap]`]D @@ b]\ @ ax]`]D  @@ݔa]b]\ G,p,pbh] \@G @@Ƙa]b]\  @@c]D PHc]\ XHwa]wc]D"Hc]\"Hwa]w_h_Hwa]wa]b] `h] ` ]D `]D `]D b`]\  K `@O$ @ v*0 `] `(] b] G< '`@] 'c]D < '`]D $ 'bx] 'c] 'G'o`p]D '_c]D 'O_w?_w/`] '`] '_w @ssssssGsG4@sGsGsG4@sG4@sGosG_sGOs_?s'_/s/G4@s7G4@s?_@sG '`x]D HxH  m'H r'H`]\ G,p,p,pD $ O Oa]`]\ G,p,p,p  `@O$ @ Ñ*0 !@@ Ŗa]G``]\ ,p,p,p  `@O$ @ *0 `]\ G,p,p,p G @@@sG 'G`x]D O`] `]$``(] `(]$``] @ wb8]D H"bP] c] $@`@] $@H`] H c]\ D XHc@]D H`h] w @ @c@]D HEb8]D H>c@]D ?c@]$`a] @ `h]$`?` ]$`?`]$`?`]$` b]$` b]$` b8]$`bp]@ K`]@ Fb8]D ObP] c] $@`@] $@O`] Oc]\ D XO~b@]\ @ ѐa] @ 'G<  A@`tw7/, @7 ' ' ' '! @H , `] @H', 'G7G'G$ 'G'G〤O74  A@ctww' 7G'G$ 'G'G瀤H#_ c] @<< ,0b]@< ,@7_ wG'G$ 'G'G߀O74  A@bdwa]a]@@ w_瀤h_@ +_@ '@ -  @ @ (_@  @ )_@ @ ,@ : @G@< @ +@ 1 `]4` 'G :G,0b]4@Gc],@G 'G!O '@ 'ەa] Ha] a] H ȑH'G'Gc] @'Gc] @Gc],@GGc],@G 'G!O A@` wc]@c] Hb] Hcp] `0] @b] Hw@ " H`0]  @ w_瀤hH_ w_cH] @wנ 'cP] H__t`_ߠ w_b] @w 'cP]  OcP] $ _$`c] _ @c]$`bP] cP] @bP]$`cp] `0] @cp]$`__t`_c] @b] $@_t``]\ _t`_`]t`_\ wH+`]\ w_  H _\ w_  O_ `$ $`c] $ c]$`_ w__ ,0\@wc]@_w_ A@`Lwwc]@`]\ w`]w_\ _h_\ _h_w_\ w_\ _o_\ _ o_ w___ ,0t@_ ` $`c]  c]$`_ cP] H0_\ _t`_@ bP] cP] $@bP]$`c] cP] $@c]$`cp] `0] $@cp]$`c]@O0A@bw'''cP]$`cP] ,0cH]$`b]$`b] cP] L@c]$`cH] c] @ `0]$`b]$` 'G< A@`w'wwc]D 'GϠ c]$`G'G'Gˀ HO 'נ '_Gۥ,p,pL H=G׀/H9_Gۥ,p,pLG`],@Gנ '_Gۥ,p,pD  H  :G`],@Gנ 'צ G`],@G۠ '_Gۥ,p,pL HG׀/O c]$`G_`]@@'H`X]D H ``]!a]@@^H c]$` '_Gۥ,p,pL H6_Gۥ,p,pD  H _Gۥ,p,pD  H`X]D H ``]!b]@@' ?H'G۠ '_Gۥ,p,pL OH '_Gۥ,p,pL H"_Gۥ,p,pLG߀HG۠ '_Gۥ,p,pL H _Gۥ,p,pLG߀O_Gۥ,p,pD  H.c]\ h`X]D H``]!b]Gb]@@Ö ?HR'c]\ _Gۥ,p,pt`_Gۥ,p,p w_D  'G_$`Gˀ H'_Gۥ,p,pD  H`X]D H``]!b]Gb]@@ ?H'H G߀?O ?OO^G'G< 0A@bww''_c]t`c]$`c8]$`c]\  @ P@wwwwA@b w'wc] HCwߢ__ߐ@!@jb ],0c]\@ @@c8] H< b(]ߐ@@Pc8] H``] b0]ߐ@@ۖPP@p@?fprobe: a NetFlow probe. Version %s Usage: fprobe [options] remote:port[/[local][/type]] ... -h Display this help -p Don't put the interface into promiscuous mode -i Network interface name -f Filter expression (see tcpdump manual for details) -s How often scan for expired flows [5] -g Fragmented flow lifetime [30] -d Idle flow lifetime (inactive timer) [60] -e Active flow lifetime (active timer) [300] -n NetFlow version for use (1, 5 or 7) [5] -a
Use
as source for NetFlow flow -x [:] Workaround for SNMP interfaces indexes [0] -b Memory bulk size (1..%u) [%u] -m Memory limit (0=no limit) [0] -q Pending queue length [100] -B Kernel capture buffer size [0] -r Real-time priority (0=disabled, %d..%d) [0] -t Produce nanosecond delay after each bytes sent [0:0] -S Snaplen [256] -K Link layer header size -k Don't exclude link layer header from packet size -c Directory to chroot to -u User to run as -v Maximum log level (0=EMERG, ..., 6=INFO, 7=DEBUG) [6] -l <[dst][:id]> Log destination and log/pidfile idetifier [1] remote:port Address of the NetFlow collector 1.1fill(): Unknown format at %x[%d]: %dpcap_loop() terminated: %sIllegal %s NetFlow version[%s]malloc(): %s %s/%s.pid/var/runpending queue lengthrealtime prioritybulk size%d:%dsource addressgetpwnam(%s): %s Unknown usersocket(): %s bind(): %s Error in collector #%d parameters connect(): %s fork(): %s/dev/nullrw[%ld]pcap_lookupdev(): %s pcap_open_offline(): %spcap_open_live(): %ssetsockopt(): %sUknown data link type %d. Use -K option.pcap_compile(): %s. Filter: %spcap_setfilter(): %sFilter expression is empty! Are you sure?mem_alloc(): %spthread_sigmask(): %sStarting %s....could not chroot to %s: %spthread_attr_setschedpolicy(): %spthread_create(): %ssetgroups: %ssetregid(%u): %ssetreuid(%u): %sCan't create pid file. fopen(): %s%ld pid: %dinterface: %s, datalink: %s (%d)filter: "%s"options: p=%d s=%u g=%u d=%u e=%u n=%u a=%s x=%u:%u b=%u m=%u q=%u B=%u r=%u t=%u:%u S=%d K=%d k=%d c=%s u=%s v=%u l=%u%s%scollector #%d: %s:%u/%s/%cSIGTERM received. Emitting flows cache...Done.NULLEN10MBIEEE802ARCNETSLIPPPPFDDIATM_RFC1483RAWSLIP_BSDOSPPP_BSDOSATM_CLIPPPP_SERIALPPP_ETHERC_HDLCIEEE802_11LOOPLINUX_SLLLTALKPRISM_HEADERIP_OVER_FCSUNATMARCNET_LINUXENCFRELAYIEEE802_11_RADIOPFLOGLINUX_IRDAAPPLE_IP_OVER_IEEE1394IEEE802_11_RADIO_AVSUNKNOWN/dev/randomrWrong parameters Missing required option Option `-%c': %s require parameterrepeat not allowed[%s]: %s%s%s%s EMERGALERTCRITERRWARNINGNOTICEINFODEBUG 0@HXhx@P`px8P 0H`PX`hpXhp000ܜ€H00b0x( 0X0h00Ȩ70(080„0P0ܔˆ0p0t000Ƞ0ܘ 0b h0|0<0°@00܈00ܐ0ܬ`X0¤0l0S0<@00Ȱ0ȸ\0̀00@000̈0`0 0¨00o0o0o0o0o 0o@0o`0o0o0o0o0o0o 0o@0ow`0oo0og0o_0oW0oO0oG 0o?@0o7`0o/0o'0o0o0o0o 0o@0o`0o0o0o0o0o0o 0o@0o`0o0o0o0o0o0o 0o@0ow`0oo0og0o_0oW0oO0oG 0o?@0o7`0o/0o'0o0o0o0o 0o@0o`0o0o0o0o0o 0o 0o @0o `0o 0o 0o 0o 0o 0o 0o @0ow `0oo 0og+  88x ip oo,o-- oo'MXCVMXCVMXCV<,aBbcdefghiKklmnpqrSstuvxfprobed     (82H3Xhhi plqrwz{ m kX`[uX`[0HPFONxY   #*#)#)#)#+&'#*   #) #*#+    00 *4R`MX (08@Xxp,--p- 5     Hx€€0ܰ3FT` ox€€`    (     0 @ H X h x         ($ @+ P2 `9 p@ xG N U \ c j 0q  x 8 P0       (    0 H `(   (   P X `  h p  0  'x€€` 1x0`x€` 8 X= hB K T ]x0h €` cx0̈8€` o pt  y   x0܈@€`    0 O@0,0ܜ;€V`]vH0 5  X `!@&19Jb"z@ X0b0x! Fd-( D0X]0h{0`0ܰ     *x3 @8A`0Ȩ@ @  7h` 0$ 8. 0 7(Sb0z80„ @ ;0P`#**(I0ܔgˆ}0p0t 8P00 `   Y- H 5 F@ K0Ƞ g p w@ 0ܘ      R 0b   ; Y G V t      hX  0|  # < - 2@ 9 I N+!x T0< q`* 0°     @@ 0 0܈ )0 G [0ܐ }0ܬ    0ܠ  `  2X Q 9@` [0¤ ~  0l   0 @  H C 88$, S@:A0a <jr <x@00Ȱ0ȸ'\J0̀` 6f00@1 0ܨ€ (\ 0 8`\0 9, `* {`/0̈T&s NxD0`0`00 0¨#0$;0DK`biv fprobecrti.scrt1.s__get_exit_frame_monitor_ptr__do_exit_code_ptr__crt_scratchvalues-Xa.cDrodata.rodatafprobe.cBbss.bssDdata.dataDpicdata.picdata.L51.L52.L486.L1018.L1144.L1145.L1182.L1215.L1221.L1222.L1237.L1262.L1294.L1317.L1347.L1382.L1386.L1433.L1507.L1519.L1533.L1573.L1578.L1579.L1581.L1603.L1617.L1638.L1656.L1672.L1718.L1737.L1749.L1759.L1800.L1826.L1832.L1844.L1849.L1883.L1898.L1923.L1935.L1947.L1961.L1967.L1973.L1975.L1977.L1979.L1983.L1987.L1991.L2018.L2020.L2062.L2085netflow.chash.c.L72.L73.L_cseg0.L_cseg1.L_cseg2mem.cmy_getopt.c.L71.L98.L149.L150.L176my_log.c.L58.L65.L74crtn.s_END__START_$XAoAMiKbYMLO0EL.killedscan_threadsetreuidfclosechroot$XAoAMiKbYMLO0EL.pidfilepath$XAoAMiKbYMLO0EL.emit_mutextotal_elements$XAoAMiKbYMLO0EL.sched_minsyslog$XAoAMiKbYMLO0EL.netflow__environ_lockdlt$XAoAMiKbYMLO0EL.scan_condmem_free$XAoAMiKbYMLO0EL.emit_rate_bytes_startgetaddrinfomy_log_openpthread_attr_initpthread_attr_setschedparamcallockillsetsockoptsprintf__fsr_init_value$XAoAMiKbYMLO0EL.filter_get_exit_frame_monitorpthread_mutex_unlockmy_getopt$XAoAMiKcYMLOUHL.crc16_table$XBoAMiKcYMLOUKL.my_getopt.my_opterr$XAoAMiKcYMLOUJL.element_size$XAoAMiKbYMLO0EL.link_layer_sizesscanfemit_thread$XAoAMiKbYMLO0EL.flows$XAoAMiKbYMLO0EL.pidfile$XAoAMiKcYMLOUJL.limit_memory$XAoAMiKbYMLO0EL.promiscpcap_loopsrand$XAoAMiKbYMLO0EL.unpending_timeout_end__1cG__CrunMdo_exit_code6F_v_fopen$XAoAMiKbYMLO0EL.emit_timeout_lib_versionatoisetgroups_environfill_DYNAMIC$XAoAMiKbYMLO0EL.bulk_quantity$XAoAMiKbYMLO0EL.start_time_offsetvsnprintfgetpidhashpthread_attr_setschedpolicypthread_cond_signal_finisighandlersetvbufsetregidsetsidsigactionpthread_mutex_init$XAoAMiKbYMLO0EL.devmem_allocmem_init$XAoAMiKbYMLO0EL.scan_mutexpthread_detach$XAoAMiKbYMLO0EL.off_tl$XAoAMiKbYMLO0EL.emit_cond$XBoAMiKcYMLOUKL.my_getopt.flag$XAoAMiKbYMLO0EL.link_layer$XAoAMiKbYMLO0EL.sched_maxfreadsigemptysetfind$XAoAMiKbYMLO0EL.thidsigaddsetoptind$XAoAMiKcYMLOUGL.NetFlow5_Flow$XAoAMiKcYMLOULL.my_log_flags$XAoAMiKbYMLO0EL.sigs$XAoAMiKcYMLOUJL.mem_index_table_size$XAoAMiKcYMLOUJL.bulk_quantitygetuptime$XAoAMiKbYMLO0EL.pending_head$XAoAMiKbYMLO0EL.npeers_rotmallocpcap_compilemain_GLOBAL_OFFSET_TABLE_pcap_datalinkgettime$XAoAMiKbYMLO0EL.flows_emitcloselogatexitpcap_open_livetotal_memory$XAoAMiKbYMLO0EL.flows_mutexstrchrfprintf$XAoAMiKcYMLOUGL.NetFlow1_Header$XAoAMiKcYMLOUGL.NetFlow7_Header$XAoAMiKcYMLOUHL.shuffle_table$XAoAMiKcYMLOUJL.mem_mutexpcap_threadpthread_create$XBoAMiKbYMLO0EL.main.threadsoptargpcap_filenosocketpcap_lookupdevchdirfreeaddrinfo$XAoAMiKbYMLO0EL.parmssched_get_priority_max$XAoAMiKcYMLOUJL.element_table_size$XAoAMiKbYMLO0EL.unpending_mutexhash_initsendstrlenpthread_sigmaskforkfcntl$XAoAMiKbYMLO0EL.sockbufsize$XAoAMiKcYMLOUGL.NetFlow7_Flow$XAoAMiKbYMLO0EL.emit_timemy_log_closepthread_mutex_lock$XAoAMiKcYMLOULL.my_log_names$XAoAMiKbYMLO0EL.emit_rate_delay$XAoAMiKcYMLOULL.my_log_indent$XAoAMiKbYMLO0EL.pending_tail$XAoAMiKbYMLO0EL.pw$XAoAMiKcYMLOULL.my_log_min_levelfree_elements$XAoAMiKbYMLO0EL.verbosity$XAoAMiKbYMLO0EL.log_dest$XAoAMiKbYMLO0EL.unpending_cond__xargvpcap_open_offline$XAoAMiKbYMLO0EL.active_lifetimepthread_setconcurrency$XAoAMiKbYMLO0EL.frag_lifetimehash_flow$XAoAMiKbYMLO0EL.snmp_output_indexpcap_setfilter___errno$XAoAMiKcYMLOUJL.malloc_sizegetpwnampcap_geterr$XAoAMiKbYMLO0EL.emit_packetconnect$XAoAMiKbYMLO0EL.pending_queue_length_etextnanosleepfreopenpcap_callbackmemset$XAoAMiKbYMLO0EL.scan_frag_dregput_intoopenlogcrc16$XAoAMiKcYMLOUGL.NetFlow5_Header__iob$XAoAMiKbYMLO0EL.scan_interval___Argv$XAoAMiKbYMLO0EL.off_nl$XAoAMiKbYMLO0EL.npeers_PROCEDURE_LINKAGE_TABLE_$XAoAMiKbYMLO0EL.peers$XAoAMiKbYMLO0EL.inactive_lifetime$XAoAMiKcYMLOUJL.rootusage$XAoAMiKbYMLO0EL.emit_sequence$XAoAMiKbYMLO0EL.sig_mask$XAoAMiKbYMLO0EL.ident__xargc_exit_edatamy_logstrerror$XAoAMiKbYMLO0EL.pidcmpmtime$XAoAMiKbYMLO0EL.pcap_handlecopy_flowinet_ntoabind$XBoAMiKcYMLOUKL.my_getopt.optstring$XAoAMiKcYMLOUGL.NetFlow1_Flowunpending_threadNetFlow1sched_get_priority_min$XAoAMiKcYMLOUHL.crc16_polyNetFlow5$XAoAMiKbYMLO0EL.start_time$XAoAMiKbYMLO0EL.snmp_input_index$XAoAMiKbYMLO0EL.emit_count$XAoAMiKbYMLO0EL.schedpNetFlow7selectpthread_cond_timedwaitremovegettimeofdaystrcatanotate anotate 5 568 "6 #6$$6,anotate Y,Sw7 Y(Sw7 @FONxYanotate anotate anotate anotate @(#)stdio.h 1.84 04/09/28 SMI@(#)feature_tests.h 1.25 07/02/02 SMI@(#)ccompile.h 1.2 04/11/08 SMI@(#)isa_defs.h 1.29 08/06/06 SMI@(#)stdio_iso.h 1.8 05/08/16 SMI@(#)va_list.h 1.15 04/11/19 SMI@(#)stdio_tag.h 1.4 04/09/28 SMI@(#)stdio_impl.h 1.15 07/03/05 SMI@(#)stdio_c99.h 1.2 04/03/29 SMI@(#)stdlib.h 1.51 04/06/30 SMI@(#)stdlib_iso.h 1.9 04/09/28 SMI@(#)stdlib_c99.h 1.2 04/03/29 SMI@(#)unistd.h 1.76 06/03/10 SMI@(#)types.h 1.86 07/09/20 SMI@(#)machtypes.h 1.13 99/05/04 SMI@(#)int_types.h 1.10 04/09/28 SMI@(#)select.h 1.19 04/01/28 SMI@(#)time_impl.h 1.11 05/05/19 SMI@(#)time.h 2.77 09/06/02 SMI@(#)time.h 1.45 08/01/09 SMI@(#)time_iso.h 1.4 04/09/07 SMI@(#)unistd.h 1.44 10/01/04 SMI@(#)string.h 1.27 07/01/14 SMI@(#)string_iso.h 1.5 04/06/18 SMI@(#)signal.h 1.43 04/09/28 SMI@(#)signal_iso.h 1.1 99/08/09 SMI@(#)signal_iso.h 1.6 03/05/02 SMI@(#)signal.h 1.66 04/09/28 SMI@(#)siginfo.h 1.59 04/07/15 SMI@(#)machsig.h 1.15 99/08/15 SMI@(#)procset.h 1.25 04/07/16 SMI@(#)in_systm.h 1.7 01/09/25 SMI@(#)socket.h 1.78 08/01/18 SMI@(#)uio.h 1.34 09/06/15 SMI@(#)socket_impl.h 1.1 05/08/02 SMI@(#)un.h 1.11 02/10/02 SMI@(#)if_dl.h 1.10 03/05/21 SMI@(#)netconfig.h 1.24 04/02/27 SMI@(#)in.h 1.55 09/05/27 SMI@(#)stream.h 1.115 08/07/22 SMI@(#)vnode.h 1.135 10/01/15 SMI@(#)t_lock.h 1.45 98/02/01 SMI@(#)machlock.h 1.25 03/09/02 SMI@(#)param.h 1.83 10/01/29 SMI@(#)mutex.h 1.22 08/05/05 SMI@(#)rwlock.h 1.10 08/05/05 SMI@(#)semaphore.h 1.5 98/02/01 SMI@(#)condvar.h 1.14 04/10/21 SMI@(#)rwstlock.h 1.4 04/11/09 SMI@(#)ksynch.h 1.6 97/10/22 SMI@(#)cred.h 1.27 06/05/03 SMI@(#)resource.h 1.37 07/02/07 SMI@(#)seg_enum.h 1.9 09/07/02 SMI@(#)kstat.h 1.22 07/02/02 SMI@(#)kmem.h 1.40 10/05/19 SMI@(#)vmem.h 1.13 10/01/06 SMI@(#)poll.h 1.28 98/11/23 SMI@(#)strmdep.h 1.10 98/01/06 SMI@(#)model.h 1.24 04/09/28 SMI@(#)strft.h 1.2 00/03/17 SMI@(#)byteorder.h 1.18 04/09/28 SMI@(#)inet.h 1.21 08/01/04 SMI@(#)ip.h 1.14 05/08/02 SMI@(#)tcp.h 1.18 05/12/21 SMI@(#)inttypes.h 1.3 03/12/04 SMI@(#)int_limits.h 1.9 04/09/28 SMI@(#)int_const.h 1.5 04/09/28 SMI@(#)int_fmtio.h 1.6 04/09/28 SMI@(#)udp.h 1.8 08/11/19 SMI@(#)ip_icmp.h 1.7 02/01/14 SMI@(#)pwd.h 1.22 04/09/28 SMI@(#)pthread.h 1.37 04/09/28 SMI@(#)sched.h 1.10 03/03/06 SMI@(#)errno.h 1.17 03/01/03 SMI@(#)errno.h 1.20 00/01/12 SMI@(#)netdb.h 1.30 03/12/04 SMI@(#)stat.h 1.12 10/01/15 SMI@(#)stat_impl.h 1.4 03/12/04 SMI@(#)fcntl.h 1.17 06/03/10 SMI@(#)fcntl.h 1.52 07/03/05 SMI@(#)inttypes.h 1.4 04/04/29 SMI@(#)stdint.h 1.1 03/12/04 SMI@(#)syslog.h 1.11 96/05/17 SMI@(#)syslog.h 1.11 03/06/10 SMIacomp: Sun C 5.11 SunOS_sparc 145354-01 2010/10/11@(#)inttypes.h 1.4 04/04/29 SMI@(#)feature_tests.h 1.25 07/02/02 SMI@(#)ccompile.h 1.2 04/11/08 SMI@(#)isa_defs.h 1.29 08/06/06 SMI@(#)inttypes.h 1.3 03/12/04 SMI@(#)int_types.h 1.10 04/09/28 SMI@(#)int_limits.h 1.9 04/09/28 SMI@(#)int_const.h 1.5 04/09/28 SMI@(#)int_fmtio.h 1.6 04/09/28 SMI@(#)stdint.h 1.1 03/12/04 SMIacomp: Sun C 5.11 SunOS_sparc 145354-01 2010/10/11@(#)stdio.h 1.84 04/09/28 SMI@(#)feature_tests.h 1.25 07/02/02 SMI@(#)ccompile.h 1.2 04/11/08 SMI@(#)isa_defs.h 1.29 08/06/06 SMI@(#)stdio_iso.h 1.8 05/08/16 SMI@(#)va_list.h 1.15 04/11/19 SMI@(#)stdio_tag.h 1.4 04/09/28 SMI@(#)stdio_impl.h 1.15 07/03/05 SMI@(#)stdio_c99.h 1.2 04/03/29 SMI@(#)stdlib.h 1.51 04/06/30 SMI@(#)stdlib_iso.h 1.9 04/09/28 SMI@(#)stdlib_c99.h 1.2 04/03/29 SMI@(#)unistd.h 1.76 06/03/10 SMI@(#)types.h 1.86 07/09/20 SMI@(#)machtypes.h 1.13 99/05/04 SMI@(#)int_types.h 1.10 04/09/28 SMI@(#)select.h 1.19 04/01/28 SMI@(#)time_impl.h 1.11 05/05/19 SMI@(#)time.h 2.77 09/06/02 SMI@(#)time.h 1.45 08/01/09 SMI@(#)time_iso.h 1.4 04/09/07 SMI@(#)unistd.h 1.44 10/01/04 SMI@(#)fcntl.h 1.17 06/03/10 SMI@(#)fcntl.h 1.52 07/03/05 SMI@(#)inttypes.h 1.4 04/04/29 SMI@(#)inttypes.h 1.3 03/12/04 SMI@(#)int_limits.h 1.9 04/09/28 SMI@(#)int_const.h 1.5 04/09/28 SMI@(#)int_fmtio.h 1.6 04/09/28 SMI@(#)stdint.h 1.1 03/12/04 SMIacomp: Sun C 5.11 SunOS_sparc 145354-01 2010/10/11@(#)stdlib.h 1.51 04/06/30 SMI@(#)stdlib_iso.h 1.9 04/09/28 SMI@(#)feature_tests.h 1.25 07/02/02 SMI@(#)ccompile.h 1.2 04/11/08 SMI@(#)isa_defs.h 1.29 08/06/06 SMI@(#)stdlib_c99.h 1.2 04/03/29 SMI@(#)string.h 1.27 07/01/14 SMI@(#)string_iso.h 1.5 04/06/18 SMI@(#)syslog.h 1.11 96/05/17 SMI@(#)syslog.h 1.11 03/06/10 SMI@(#)va_list.h 1.15 04/11/19 SMI@(#)errno.h 1.17 03/01/03 SMI@(#)errno.h 1.20 00/01/12 SMI@(#)inttypes.h 1.4 04/04/29 SMI@(#)inttypes.h 1.3 03/12/04 SMI@(#)int_types.h 1.10 04/09/28 SMI@(#)int_limits.h 1.9 04/09/28 SMI@(#)int_const.h 1.5 04/09/28 SMI@(#)int_fmtio.h 1.6 04/09/28 SMI@(#)stdint.h 1.1 03/12/04 SMI@(#)pthread.h 1.37 04/09/28 SMI@(#)types.h 1.86 07/09/20 SMI@(#)machtypes.h 1.13 99/05/04 SMI@(#)select.h 1.19 04/01/28 SMI@(#)time_impl.h 1.11 05/05/19 SMI@(#)time.h 2.77 09/06/02 SMI@(#)time.h 1.45 08/01/09 SMI@(#)time_iso.h 1.4 04/09/07 SMI@(#)sched.h 1.10 03/03/06 SMIacomp: Sun C 5.11 SunOS_sparc 145354-01 2010/10/11@(#)unistd.h 1.76 06/03/10 SMI@(#)feature_tests.h 1.25 07/02/02 SMI@(#)ccompile.h 1.2 04/11/08 SMI@(#)isa_defs.h 1.29 08/06/06 SMI@(#)types.h 1.86 07/09/20 SMI@(#)machtypes.h 1.13 99/05/04 SMI@(#)int_types.h 1.10 04/09/28 SMI@(#)select.h 1.19 04/01/28 SMI@(#)time_impl.h 1.11 05/05/19 SMI@(#)time.h 2.77 09/06/02 SMI@(#)time.h 1.45 08/01/09 SMI@(#)time_iso.h 1.4 04/09/07 SMI@(#)unistd.h 1.44 10/01/04 SMI@(#)stdio.h 1.84 04/09/28 SMI@(#)stdio_iso.h 1.8 05/08/16 SMI@(#)va_list.h 1.15 04/11/19 SMI@(#)stdio_tag.h 1.4 04/09/28 SMI@(#)stdio_impl.h 1.15 07/03/05 SMI@(#)stdio_c99.h 1.2 04/03/29 SMIacomp: Sun C 5.11 SunOS_sparc 145354-01 2010/10/11@(#)syslog.h 1.11 96/05/17 SMI@(#)feature_tests.h 1.25 07/02/02 SMI@(#)ccompile.h 1.2 04/11/08 SMI@(#)isa_defs.h 1.29 08/06/06 SMI@(#)syslog.h 1.11 03/06/10 SMI@(#)va_list.h 1.15 04/11/19 SMI@(#)stdarg.h 1.47 04/09/28 SMI@(#)stdarg_iso.h 1.4 04/11/19 SMI@(#)va_impl.h 1.1 04/11/19 SMI@(#)stdarg_c99.h 1.2 04/09/28 SMI@(#)stdio.h 1.84 04/09/28 SMI@(#)stdio_iso.h 1.8 05/08/16 SMI@(#)stdio_tag.h 1.4 04/09/28 SMI@(#)stdio_impl.h 1.15 07/03/05 SMI@(#)stdio_c99.h 1.2 04/03/29 SMI@(#)stdlib.h 1.51 04/06/30 SMI@(#)stdlib_iso.h 1.9 04/09/28 SMI@(#)stdlib_c99.h 1.2 04/03/29 SMIacomp: Sun C 5.11 SunOS_sparc 145354-01 2010/10/11ld: Software Generation Utilities - Solaris Link Editors: 5.10-1.500JLfprobe.c /var/tmp/fprobe-1.1/src /opt/solstudio12.2/prod/bin/cc -xtarget=ultra -m64 -xcode=pic32 -DHAVE_CONFIG_H -I. -I.. -I/usr/local/include -g -D_POSIX_PTHREAD_SEMANTICS -D_REENTRANT -c fprobe.c -W0,-xp\$XAoAMiKbYMLO0EL.Xa;g;P;R=Sun C 5.11 SunOS_sparc 145354-01 2010/10/11;G=$XAoAMiKbYMLO0EL.;backend;raw;cd;DBG_GEN 5.3.0intunsignedchar}DLTlinktypej#offset_linkq#offset_nlq#offset_nl_nosnapq# descr#long6dltO getopt_parmsname}#flagj#countj#arg# Q  parms hQX parms h filter  scan_intervalq @ frag_lifetimej X inactive_lifetimej \ active_lifetimej ` bulk_quantityq  pending_queue_lengthq unsigned short #uint16_t5NetFlow00Versionq#HeaderSizeq#MaxFlowsq#FlowSizeq# SeqOffsetq#HeaderFieldsq#HeaderFormatH#FlowFieldsq# FlowFormatH#(Q netflow0  verbosityq  log_destq  link_layer_sizej unsigned char uint8_t__pthread_mutex_flag15#__pthread_mutex_flag2#__pthread_mutex_ceiling#__pthread_mutex_type5#__pthread_mutex_magic5#__pthread_mutex_pad# quint32_t@__pthread_ownerpid#__pthread_lockword#unsigned long @upad64_t__pthread_mutex_lock64#__pthread_mutex_lock32#__pthread_mutex_owner64Q#_pthread_mutexY__pthread_mutex_flags#__pthread_mutex_lockd#__pthread_mutex_dataQ# pthread_mutex_t unpending_mutexY,  $__pthread_cond_flag#__pthread_cond_type5#__pthread_cond_magic5#_pthread_cond __pthread_cond_flags#__pthread_cond_dataQ# $pthread_cond_t unpending_cond -  scan_mutexY/ ( scan_cond 0 H emit_mutexY4  emit_cond 5 } c ident D8  emit_timeoutj=  unpending_timeoutj=  juid_t jgid_tpasswd@ pw_name#pw_passwd#pw_uid #pw_gid #pw_age#pw_comment# pw_gecos#(pw_dir#0pw_shell#8 pw ? usageB67p Dsighandlerv77 Mjsigu|Dgettime88@  nowx t hD time_tTime sec #usec# suseconds_ttimeval ?tv_sec #tv_usec #cmpmtime8`8   t1x t2pD getuptime89  txDhash_flow9@955.flowxD #hash_t  s_b1#s_b2#s_b3#s_b4# s_w15#s_w25#  S_un_bF#S_un_w#S_addr#in_addr .S_un#7FlowhZsip #dip #proto#id5# sp5# dp5#tos#tcp_flags#pkts@#size@# sizeF@#(sizeP@#0ctime #8mtime #Hflagsj#Xnext.#`copy_flow9:.srcx.dstpCD find;<.E.wherex.whatpNprevh flowppEXD.Eput_into<@|j.flowxjflagt retjl h5j flown.` flowppEXCD fill=@FXjfields<|Hformat<p.flow<hp<` ij>TD(voidemit_threadFNT flow.p ph now X timeoutH ijD retj@ sentj sizej delayj peer_rot_curj peer_rot_workjDtimespec -tv_sec #tv_nsec#unpending_thread9NxO now :h timeout;XDscan_threadhOS> ijlt flow.mh flowppEm` now nP timeouto@Dpcap_callbackSX1Buselessxpkthdrppacketh nl` tlX flow.P off_fragjL psizejHACD$ u_char1 qbpf_u_int32pcap_pkthdr ts #caplenK#lenK#a1 uchar_t #ushort_tipip_v#ip_hl#ip_tos#ip_len#ip_id#ip_off#ip_ttl#ip_p# ip_sum# ip_src # ip_dst #pcap_threadYYDmainYjjargc|argvp errbuf} bpf_filter0} dhost} dport} lhost} type} log_suffix} cj} ij} sockj} memory_limitj} link_typej} link_type_idxj} snaplenj} hints| res| saddr| tattr| sigacts| threads  timeout |CD } qu_int #u_shortbpf_insn'code#jt1#jf1#kK#bpf_programpbf_len#bf_insns'# qsocklen_t #sa_family_t} sockaddrsa_family#sa_data#addrinfo0ai_flagsj#ai_familyj#ai_socktypej#ai_protocolj# _ai_padj#ai_addrlenp#ai_canonname#ai_addr# ai_next#( #in_port_t }sockaddr_in sin_family#sin_port#sin_addr #sin_zero#_pthread_attr__pthread_attrp# pthread_attr_t!_handler#_sigaction#q>`__sigbits!# >sigset_tsigaction sa_flagsj#_funcptr#sa_mask`#  killedj< 0 jpid_t pid; 0 pidfilepath: 0m__FILE__padP# mFILE pidfile9 0X flows_emit.6 0Ƞ scan_frag_dreg.2 0 pending_tail.1 0 pending_head.1 0Y | flows_mutex Y*  .  flows ) (  sigsj' ˆpeer,!asockj#addr#laddr#typej#$seq#( peers!a& 0ȸ npeers_rotj% 0 npeersj% 0Ȱ sched_maxj$ „ sched_minj$ €j"&sched_param$"sched_priorityj#sched_nicelimj#sched_nicej#sched_pad" # schedp"&# 0 sig_mask`" 0@ qpthread_t thid"! 0Ppcap #pcap_t # pcap_handle#& 0#q emit_packet#R 0 emit_time  0° emit_rate_delayq 0 emit_rate_bytesq 0 emit_sequence 0 emit_countq 0¨ off_tlj 0 off_nlj 0 start_time_offset 0Ȩ start_time   link_layerj 0 snmp_output_indexq 0¤ snmp_input_indexq 0  sockbufsizej 0< dev 0 promiscq 0 mem_initj%!q!q!q"mem_free%!#mem_alloc$hash_init hash5&R!&!j&RQ my_getoptj&!j!&[!&d}&"my_log&!q!&%"my_log_open'!!q!q}'}') attropenj'v!' !'2!j%}'v openatj'!j!'!j%}' creatj(!'!q}( openj(A!( !j%}(A}(S attropenj(!(J!(\!j%}( openatj(!j!(!j%}( creatj)+!(!q})+ openj)k!)4!j%})k @dev_t @ino_t qmode_t qnlink_t off_t timestruc_t jblksize_t blkcnt_t}**stat+Wst_dev)}#st_ino)#st_mode)#st_nlink)#st_uid #st_gid #st_rdev)}# st_size)#(st_atim)#0st_mtim)#@st_ctim)#Pst_blksize)#`st_blocks)#hst_fstype* #p** lstatj+!)t!+W}+ fstatatj+!j!+!+W!j}+ statj,!!+!+W fstatj,O!j!+W},O},~stat64-st_dev)}#st_ino)#st_mode)#st_nlink)#st_uid #st_gid #st_rdev)}# st_size)#(st_atim)#0st_mtim)#@st_ctim)#Pst_blksize)#`st_blocks)#hst_fstype,a#p,~ fstatatj-!j!,X!-!j}- lstatj.8!.!-}.8 statj.w!.A!- fstatj.!j!-"freeaddrinfo.!}.}.. getaddrinfoj/N!.!.!.!.j#___errno/N pthread_setconcurrencyj/!j $/ pthread_cond_timedwaitj0!/!/!/ pthread_cond_signalj0A!/ pthread_mutex_unlockj0u!/ pthread_mutex_lockj0!/_pthread_mutexattr0__pthread_mutexattrp#00 pthread_mutex_initj14!/!0 pthread_detachj1b!qq1k&1} pthread_createj1!1b!1t!1!"&1 pthread_attr_setschedparamj28!1!1 pthread_attr_setschedpolicyj2|!1!j pthread_attr_initj2!1 sched_get_priority_minj2!j sched_get_priority_maxj3!j}3 __posix_getpwnam_rj3!3"! !!j!3+ __posix_getpwuid_rj3!j! !!j!3+}3 getpwnam 4!3 inet_ntoa4C! socketj4{!j!j!j4{ setsockoptj4!j!j!j!4!q4 ssize_t send45>!j!4!@!j5> connectj5!j!5G!q5 bindj5!j!5!qunsigned long long 5rlim64_trlimit6469rlim_cur5#rlim_max5#5 getrlimitj6t!j!6956t setrlimitj6!j!6} @rlim_trlimit7rlim_cur6#rlim_max6#6 getrlimitj7A!j!767A setrlimitj7!j!7J# pcap_filenoj7!7 pcap_datalinkj7!70}7 pcap_compilej8Q!7!7!7!j!q pcap_geterr8|!7 pcap_setfilterj8!7!7a818'8!B!8!88 pcap_loopj9T!7!j!8!9}9T} pcap_open_offline#&9!9]!9f}9 pcap_open_live#&: !9!j!j!j!9f pcap_lookupdev:;!>:; __posix_sigwaitj:!:D!/N>:> pthread_sigmaskj:!j!:!: sigemptysetj; !: sigaddsetj;>!:!js;>s sigactionj;!j!;G!;P killj;!j!j}; strchr<!;!j}< @size_t strlen<!j> pwrite4>m!j!>#!@!4 pread4>!j!>m!@!4 lseek=>!j!=!j ftruncatej?!j!}? truncatej?b!?(! tell)?!j(setsid setreuidj?!j!j setregidj?!j!jj? setgroupsj@@!j!@@@ pwrite4@!j!@I!@!4 pread4@!j!>m!@!4 lseek)A !j!)!j lockfjAA!j!j!(getpid ftruncatejA!j!(fork}A chrootjA!A}A chdirjB!A B')fd_set BPfds_bitsB#B'  selectjB!j!BP!BP!BP!BYB __posix_ctime_rB!B!tm$Ctm_secj#tm_minj#tm_hourj#tm_mdayj# tm_monj#tm_yearj#tm_wdayj#tm_ydayj#tm_isdstj# BC __posix_asctime_rD!C!D nanosleepjDP!D !D gettimeofdayjD!BY! mkstempjD! mkstempjD! mallocD!@"exitE!j}E atoijEK!Em ftello=Ez!EKm fseekojE!Ez!!jE fsetposjE!Ez!E fgetposjF6!Ez!E(tmpfile}FK}F] freopenF!FT!Ff!}F}F fopenF!F!Fm ftello)G)!F fseekojGa!Ez!!j}Ga snprintfjG!!@!Gj%G fsetposjG!Ez!G fgetposjH !Ez!E}H }H2 sscanfjHt!H)!H;%}Ht sprintfjH!!H}%}H fprintfjH!Ez!H% setvbufjI88off_ttell x  pwrite0  0pread0 ?0lseek x v xlockf 8pid_tgetpid ftruncate 88 __posix_ctime_r M  tm$  tm_sec# tm_min# tm_hour# tm_mday# tm_mon# tm_year# tm_wday# tm_yday# tm_isdst#  M __posix_asctime_r Z 8time_t Ztime Z  kmkstemp mkstemp srand rand]ftello D ]fseeko  D88 fsetpos  D 8fgetpos D tmpfile??'freopenr0?r?fopen{]ftello xfseeko+ D8filenoQ D8Qfsetpos DZfgetpos D size_t]fread&?&?8freopen/A??fopenfclose Dtmpfile mmem.c /var/tmp/fprobe-1.1/src /opt/solstudio12.2/prod/bin/cc -xtarget=ultra -m64 -xcode=pic32 -DHAVE_CONFIG_H -I. -I.. -I/usr/local/include -g -D_POSIX_PTHREAD_SEMANTICS -D_REENTRANT -c mem.c -W0,-xp\$XAoAMiKcYMLOUJL.Xa;g;P;R=Sun C 5.11 SunOS_sparc 145354-01 2010/10/11;G=$XAoAMiKcYMLOUJL.;backend;raw;cd;DBG_GEN 5.3.0 unsigned shortduint16_tunsigned charuint8_tc__pthread_mutex_flag1v#__pthread_mutex_flag2#__pthread_mutex_ceiling#__pthread_mutex_typev#__pthread_mutex_magicv#longc__pthread_mutex_padk#unsigneduint32_t__pthread_ownerpid#__pthread_lockword#unsigned longupad64_t__pthread_mutex_lock64#__pthread_mutex_lock32#__pthread_mutex_owner64.# _pthread_mutex6__pthread_mutex_flags#__pthread_mutex_lockA#__pthread_mutex_data.#pthread_mutex_t mem_mutex6  mem_alloc%8 i&t mptr'h iptrz(` eptr*X Dvoid   Mem dnext#free#first#last#mem_index_t dmem_freen eptrmx iptrzop mptrph pptrp` D mem_init0(element|bulkxlimitt D$int malloc_size" 0l element_table_size! 0| mem_index_table_size 0ptotal_memory 0ܘ limit_memory 0h bulk_quantity 0t element_size 0xfree_elements 0ܬtotal_elements 0ܜ root 0̀ pthread_mutex_unlock.pthread_mutex_lock`c `char r__posix_ctime_rziz tm$ |tm_sec#tm_min#tm_hour#tm_mday# tm_mon#tm_year#tm_wday#tm_yday#tm_isdst#  |__posix_asctime_rz  z ___errno mkstemp zmkstemp 4zfree Pcalloc qmy_getopt.c /var/tmp/fprobe-1.1/src /opt/solstudio12.2/prod/bin/cc -xtarget=ultra -m64 -xcode=pic32 -DHAVE_CONFIG_H -I. -I.. -I/usr/local/include -g -D_POSIX_PTHREAD_SEMANTICS -D_REENTRANT -c my_getopt.c -W0,-xp\$XAoAMiKcYMLOUKL.Xa;g;P;R=Sun C 5.11 SunOS_sparc 145354-01 2010/10/11;G=$XAoAMiKcYMLOUKL.;backend;raw;cd;DBG_GEN 5.3.0 -my_getoptX(qqqargc|argvpparmshcq`iq\pqXflagq 8my_opterrq <optstring  0̈D$intcharx getopt_parms namex# flagq# countq# arg#long x(  E __FILEj __pad(#Eoff64_tftellosjEfseekoqqfsetposq.fgetposqg.EFILEgtmpfilevxxfreopenvvxxfopenvC Eoff_tftelloLCfseekoqqxgetoptqqfsetposqXfgetposq.xfprintfqxxfreopenv(vx(x:fopenvz1Ctmpfilevunsigned long__posix_ttyname_rqq__posix_getlogin_rqqlockfqUqqxUtruncateq^tellsqvoidssize_tpwrite )qpread rq )lseeks qsqftruncateq qx truncateq  tellL Bq Bpwrite q Kpread q )lseekL qLqlockfq Cqqftruncateq uq u__posix_ctime_r  ~ tm$ tm_secq# tm_minq# tm_hourq# tm_mdayq# tm_monq# tm_yearq# tm_wdayq# tm_ydayq# tm_isdstq#   __posix_asctime_r  zmy_log.c /var/tmp/fprobe-1.1/src /opt/solstudio12.2/prod/bin/cc -xtarget=ultra -m64 -xcode=pic32 -DHAVE_CONFIG_H -I. -I.. -I/usr/local/include -g -D_POSIX_PTHREAD_SEMANTICS -D_REENTRANT -c my_log.c -W0,-xp\$XAoAMiKcYMLOULL.Xa;g;P;R=Sun C 5.11 SunOS_sparc 145354-01 2010/10/11;G=$XAoAMiKcYMLOULL.;backend;raw;cd;DBG_GEN 5.3.0 Wcharjlongr{my_log_names @r@{my_log_names @ my_log_openXu rindentx umin_levelt uflagsp D$unsigned my_log_close$ D my_log)(|b ulevel(| kformat(p |...(hargs*`msg+}msg_prefix,} D0 jbvoidt|va_listj{j@{?my_log_flagsu 0ܔmy_log_min_levelu 0ܐmy_log_indentr 0܈intmkstempAormkstempAr{{__FILE__pad#{off64_tftellofseekoAZ{A {ZfsetposAc{fgetposAFILEtmpfile j jfreopen_  j_ jqfopenhz{off_tftellofseekoA({Aunsigned long j9vsnprintfAr(B| jsnprintfAr( {fsetposAfgetposAN jNfprintfAW j jfreopen j j fopen @ tmpfilecloselog j csyslog A l j openlog AA /var/tmp/fprobe-1.1/src./usr/include/sys/usr/include/usr/include/netinet/usr/local/include/pcap/usr/include/isofprobe.cfprobe.hmy_getopt.hnetflow.hint_types.htypes.hpwd.hstdlib.htime.hhash.hin.htime_impl.hpcap.hbpf.hip.hnetdb.hsocket_impl.hsignal.hselect.hstdio_impl.hstdio_iso.hsched.hstat.hstdio.hresource.htime_iso.h 6 70}  8 8`L 8, 9@8$ 9$,, ;)`L0w  o( <4(Q( , 4,4,(((!()9 )4 @ (($$,(($8 @b| F4 ()` z   (  X0= \P0PH=,`` (<D0b #l@ Nx@( }      O(94((!  $  $ W+ Q1=( v S  (   $) 84(,5 )!, _(L<1 Y <@ Y  $%$$ D{& T,\LTPPP(((DrT(<$ 0X5UPT(8(D( D(8(8DDH(`,(T(ED,P,(L40hH 8$0PHH`H0$0$L0u @dhP=LdhP44G>H,P@DDs 0 $<(@,,<(,`(,)X (hD|P(,(,UX8D%4 D,PA@ z 0- 0$4@5(PP0)P@T@$ s($@LTLT\IH9h 0z0u ,-)( D0$ n'nd /var/tmp/fprobe-1.1/src/usr/include/sys.netflow.cint_types.hnetflow.hR /var/tmp/fprobe-1.1/src/usr/include/sys./usr/include/usr/include/isohash.cint_types.hhash.hstdio_impl.hstdio_iso.hstdio.hstdlib.htypes.htime_iso.h  ,V9 +  w   ED(8)4~l$4|@ /var/tmp/fprobe-1.1/src/usr/include/sys./usr/include/isomem.ctypes.hint_types.hmem.htime_iso.h 8-!(H)5$} (8@@@$ @ 0 !  <~  0 @@ ! 0  0 @D /var/tmp/fprobe-1.1/src./usr/include/usr/include/sys/usr/include/isomy_getopt.cmy_getopt.hstdio_impl.htypes.hstdio_iso.htime_iso.h X X@DX$| 4P 0\P{ X4((L9(L^ $ /var/tmp/fprobe-1.1/src/usr/include/iso/usr/includemy_log.cstdarg_iso.hstdio_impl.hstdio.hstdio_iso.h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dlt usage sighandler Mgettime ?cmpmtime getuptime hash_flowZcopy_flowfindWput_intofillemit_thread-unpending_threadscan_thread>pcap_callbackpcap_threadmainMJXtNetFlow12NetFlow5RNetFlow7GOfcrc16hashhash_init` ypmem_allocmem_free mem_inittotal_memoryfree_elementstotal_elements,kW pmy_getoptRx my_log_openmy_log_closemy_logJXDLTQgetopt_parms5uint16_tQNetFlowuint8_tuint32_tQupad64_td_pthread_mutexYpthread_mutex_t $_pthread_cond pthread_cond_t uid_t gid_t passwd time_t Time suseconds_t timeval5hash_tF in_addr7Flowtimespec1u_charKbpf_u_int32apcap_pkthdruchar_tushort_tipu_intu_shortbpf_insn0bpf_programpsocklen_tsa_family_tsockaddraddrinfoin_port_tsockaddr_in_pthread_attrpthread_attr_t>`sigset_tssigactionpid_tm__FILEFILE peer"&sched_param"pthread_t#pcap_t)}dev_t)ino_t)mode_t)nlink_t)off_t)timestruc_t)blksize_t)blkcnt_t**stat,~stat640_pthread_mutexattr4ssize_t5rlim64_t5rlimit646rlim_t6rlimit<size_t=off64_tB'fd_setBtm;JXt~uint16_t3NetFlowOuint16_tuint8_thash_t]__FILEFILEoff64_t0ssize_t xoff_t pid_t Mtm Ztime_tsize_t` yvuint16_tuint8_tuint32_t.upad64_tA_pthread_mutex6pthread_mutex_tMemdmem_index_ttmkW getopt_parmsE__FILEsoff64_tgFILELoff_tssize_t tmdx va_list__FILEoff64_tFILEoff_tJXparmsparmsfilter\fR Listen on \fIinterface\fR. If unspecified, \fBfprobe\fR will use result of pcap_lookupdev() function. On Linux systems with 2.2 or later kernels, an \fIinterface\fR argument of `\fIany\fR' can be used to capture packets from all interfaces. Note that captures on the `\fIany\fR' device will not be done in promiscuous mode. .br You may use `\fI-\fR' as \fIinterface\fR name to process files produced by \fItcpdump\fR with \fI-w\fR flag. \fBfprobe\fR will read data from \fIstdin\fR. .TP .B -f \fI\fR Filter \fIexpression\fR selects which packets will be captured. If no \fIexpression\fR is given, all packets on the net will be captured. Otherwise, only packets for which \fIexpression\fR is `true' will be captured. .br \fBfprobe\fR use silly IP-packet detection method, so it is bad idea to leave the filter empty. For general use `ip' (-fip) is good filter expression. .br Read .BR tcpdump manual for detailed \fIexpression\fR syntax. .TP .B -s \fI\fR How often scan for expired flows. [default=5] .TP .B -g \fI\fR Fragmented flow lifetime. [default=30] .TP .B -d \fI\fR Idle flow lifetime (inactive timer). [default=60] .TP .B -e \fI\fR Active flow lifetime (active timer). [default=300] .TP .B -n \fI\fR NetFlow version for use (1, 5, 7). [default=5] .TP .B -a \fI
\fR Use \fIaddress\fR as source for NetFlow flow. .TP .B -x \fI[:]\fR Workaround for SNMP interfaces indexes. [default=0] .br The second parameter may be omitted - in this case its value will be equal to the first. .br See BUGS section. .TP .B -b \fI\fR Memory bulk size. [default=200 or 10000] .br Note that maximum and default values depends on compiling options (\fI--with-membulk\fR parameter). .TP .B -m \fI\fR Memory limit for flows cache (0=no limit). [default=0] .TP .B -q \fI\fR Pending queue length. [default=100] .br Each captured packet at first puts into special buffer called `pending queue'. Purpose of this buffer is to separate most time-critical packet capture thread from other. .TP .B -B \fI\fR Kernel capture buffer size (0=don't change). [default=0] .br Increase kernel capture buffer size is most adequate way to prevent packets loss. Unfortunately, at present there is no straight way to set the buffer size throught libpcap, so this option is a hack. Moreover, now this hack take effect only on socket()-based capture mechanisms: it mean that it work on Linux and don't work on BSD systems with their bpf(). .br Note that maximum allowed size of the buffer in Linux limited and generally relatively small, so it should need to change the maximum: sysctl -w net/core/rmem_max=4194304 .TP .B -r \fI\fR Real-time priority (0=disabled). [default=0] .br If parameter greater then zero \fBfprobe\fR will use real-time scheduling policy to prevent packets loss. Note that possible values for this option depends on operating system. .TP .B -t \fI\fR Emitting rate limit (0:0=no limit). [default=0:0] .br Produce \fIN\fR nanosecond delay after each \fIB\fR bytes sent. This option may be useful with slow interfaces and slow collectors. Note that the suspension time may be longer than requested because the argument value is rounded up to an integer multiple of the sleep resolution (it depends on operating system and hardware) or because of the scheduling of other activity by the system. .br See BUGS section. .TP .B -S \fI\fR Snaplen (0=whole packet). [default=256] .br Number of bytes to capture from packet on wire. .TP .B -K \fI\fR Link layer header size. By default \fBfprobe\fR take this information from libpcap, but sometimes obtained size unsuitable for our purpose. It occurs, for example, on trunk interfaces in VLAN enviroment, where link layer header contain additional VLAN header. .br See EXAMPLES section. .TP .B -k Don't exclude link layer header from packet size. By default \fBfprobe\fR counts only IP-part of packet. .TP .B -c \fI\fR Directory to chroot to. .TP .B -u \fI\fR User to run as. .TP .B -v \fI\fR Maximum displayed log level. (0=EMERG, 1=ALERT, 2=CRIT, 3=ERR, 4=WARNING, 5=NOTICE, 6=INFO, 7=DEBUG) [default=6] .TP .B -l \fI<[dst][:id]>\fR Log destination (0=none, 1=syslog, 2=stdout, 3=both) and log/pidfile identifier. [default=1] .br This option allows to select opportune log destination and process identifier. The identifier helps to distinguish pidfile and logs of one \fBfprobe\fR process from other. .br Note that if log destination contains `\fIstdout\fR' (equal 2 or 3) \fBfprobe\fR will run in foreground. .TP .B remote:port/local/type Parameters \fIremote\fR and \fIport\fR are respectively define address and port of the NetFlow collector. .br The \fIlocal\fR parameter allows binding certain local IP address with specified collector. If the parameter is omitted the value (if any) of \fI-a\fR option will be used. .br The \fItype\fR parameter determines emitting behavior. It may be `m' for mirroring (by default) and `r' for collectors round-robin rotating. .br You may specify multiple collectors. .SH EXAMPLES Web traffic trivial capturing: .br \fBfprobe -ippp0 -f"tcp&&port 80" localhost:2055\fR .br Capturing from trunk interface: .br \fBfprobe -ieth0 -f"vlan&&ip" -K18 localhost:2055\fR .br Reasonable configuration to run under heavy load: .br \fBfprobe -fip -B4096 -r2 -q10000 -t10000:10000000 localhost:2055\fR Send packets to collector at 10.1.1.1:2055 and distribute them between collectors at 10.1.1.2:2055 and at 10.1.1.3:2055 on a round-robin basis: .br \fBfprobe 10.1.1.1:2055 10.1.1.2:2055//r 10.1.1.3:2055//r\fR .SH BUGS .B SNMP interfaces indexes and packet direction. .br Unfortunately libpcap don't provide any routing-related information about captured packet, therefore there are no straight ways to determine and distinguish input and output interfaces. However \fI-x\fR option at least can tell that flow was passed through the certain interface. Also you may launch several instances of the program with tricky set of filters to mark out each possible packet direction: .br \fBfprobe -x1:2 -ieth1 -f"ip&&dst net 10.2" localhost:2055\fR .br \fBfprobe -x2:1 -ieth2 -f"ip&&dst net 10.1" localhost:2055\fR .B Slow interfaces and slow collectors. .br There are may be problems with slow interfaces and slow collectors. It effects as emitted packets loss. On the one hand silent non-blocking sendto() implementation can't guarantee that packet was really sent to collector - it may be dropped by kernel due to outgoing buffer shortage (slow interface's problem) and on the other hand packet may be dropped on collector's machine due the similar reason - incoming buffer shortage (slow collector's problem). .br Use \fI-t\fR option as workaround for this issue. .SH SEE ALSO .BR tcpdump .BR pcap(3) .br .BR http://www.cisco.com/go/netflow 07070100000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000b00000000TRAILER!!!