Customizing Reports
I use command-line reports for occasional analysis on an ad hoc basis, such as when I'm trying to find patterns in problematic traffic. If you're going to regularly use a report with a long command line, I recommend creating a customized report. Writing truly custom detailed reports of the type I've been demonstrating requires programming, but flow-report lets you highly customize existing reports.
The stat.cfg file contains flow report definitions. You'll probably find this file in /usr/local/flow-tools/etc/cfg or /usr/local/etc/flow-tools, depending on how you installed flow-tools. The only report that comes in stat.cfg is the default report. Don't touch it; it's what makes the various command-line reports function. Add your ...
Get Network Flow Analysis now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
