diff options
| -rw-r--r-- | share/man/man4/pflow.4 | 32 |
1 files changed, 22 insertions, 10 deletions
diff --git a/share/man/man4/pflow.4 b/share/man/man4/pflow.4 index eb0bd6357a6..cf0f4f06a57 100644 --- a/share/man/man4/pflow.4 +++ b/share/man/man4/pflow.4 @@ -1,4 +1,4 @@ -.\" $OpenBSD: pflow.4,v 1.6 2008/09/12 15:22:07 henning Exp $ +.\" $OpenBSD: pflow.4,v 1.7 2008/10/10 13:55:25 sobrado Exp $ .\" .\" Copyright (c) 2008 Henning Brauer <henning@openbsd.org> .\" Copyright (c) 2008 Joerg Goltermann <jg@osn.de> @@ -15,7 +15,7 @@ .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISINGOUT OF .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. .\" -.Dd $Mdocdate: September 12 2008 $ +.Dd $Mdocdate: October 10 2008 $ .Dt PFLOW 4 .Os .Sh NAME @@ -26,11 +26,13 @@ .Sh DESCRIPTION The .Nm -interface is a pseudo-device which exports pflow +interface is a pseudo-device which exports +.Nm accounting data from the kernel using .Xr udp 4 packets. -pflow is compatible with netflow v5. +.Nm +is compatible with netflow v5. The data is extracted from the .Xr pf 4 state table. @@ -43,7 +45,9 @@ interface. .Pp The .Nm -interface will attempt to export multiple pflow records in one +interface will attempt to export multiple +.Nm +records in one UDP packet, but will not hold a record for longer than 30 seconds. The packet size and thus the maximum number of flows is controlled by the .Cm mtu @@ -58,12 +62,20 @@ ID and type. Header and flow structs are defined in .Aq Pa net/if_pflow.h . .Pp -The pflow source and destination addresses are controlled by +The +.Nm +source and destination addresses are controlled by .Xr ifconfig 8 . -flowsrc is the sender IP address of the UDP packet which can be used -to identify the source of the data on the pflow collector. -flowdst defines the collector IP address and the port. -The flowdst IP address and port must be defined to enable the export of flows. +.Cm flowsrc +is the sender IP address of the UDP packet which can be used +to identify the source of the data on the +.Nm +collector. +.Cm flowdst +defines the collector IP address and the port. +The +.Cm flowdst +IP address and port must be defined to enable the export of flows. .Pp For example, the following command sets 10.0.0.1 as the source and 10.0.0.2:1234 as destination: |