Network Flow Analysis

Modifying the Default Report

Much like with flow-nfilter, you can modify flow-report's behavior from the command line. The program supports five variables: TYPE, SORT, FIELDS, OPTIONS, and RPTOPT. I'll cover each with an example later in this chapter. For now, here's a brief look at each variable:

• TYPE tells flow-report which report to run. flow-report supports more than 70 report types. Much of this chapter is a discussion of the reports I find most useful. The flow-report manual page contains a complete list.

• SORT controls the data display order. You can sort most reports by any field in the report.

• FIELDS lets you adjust the fields that appear in a report.

• OPTIONS activates or deactivates various report-wide features.

• RPTOPT gives options to pass ...