Skip to content
SkuldNorniern edited this page Nov 2, 2023 · 4 revisions

Usage

Fluere is designed to be a versatile tool for network monitoring and analysis, offering various capture modes and command-line options to customize your experience. This section guides you through the different capture modes and the command-line options that you can utilize to tailor Fluere to your specific needs.

Capture Modes

Fluere supports several capture modes, each designed to facilitate different aspects of network monitoring and analysis. Here are the primary capture modes explained with examples:

1. Live FluereFlow Capture and Conversion

Capture NetFlow-like data in real-time from a specified network interface using the online subcommand.

fluere online -i eth0 -d 1000 -t 600000 -I 1800000 -v 1

2. Offline pcap to FluereFlow Conversion

Convert a pcap file into NetFlow-like data for offline analysis using the offline subcommand.

fluere offline -f input.pcap -c output

3. Packet Capture in pcap Format

Capture network packets in pcap format from a specified network interface using the pcap subcommand.

fluere pcap -i eth0 -d 1000

4. Live Fluereflow Capture and Conversion(TUI)

Capture Fluereflow data in real-time with Terminal User Interface (TUI) feedback from a specified network interface using the live subcommand.

fluere live -i eth0 -d 1000 -t 600000 -I 1800000 -v 1

Command Line Options

Fluere offers a range of command-line options to customize its operation. Below is a table detailing each option along with its purpose and usage:

Option Alias Purpose Usage Example
--csv -c Title of the exported CSV file -c output
--list -l List available network interfaces -l
--interface -i Select network interface to use -i eth0
--duration -d Set capture duration, in milliseconds -d 1000
--timeout -t Set flow timeout, in milliseconds -t 600000
--useMAC -M Use MAC address as key value for flow determination -M
--interval -I Set export interval, in milliseconds -I 1800000
--sleep -s Set thread pause interval (Windows only) -s 500
--verbose -v Set verbosity level -v 1

Examples

Here are a few examples demonstrating how to use these options effectively:

  1. Capturing NetFlow Data with Custom Duration and Timeout

    fluere online -i eth0 -d 1000 -t 600000 -v 1
  2. Listing Available Network Interfaces

    fluere --list
  3. Capturing Packets in pcap Format with Specified Interface

    fluere pcap -i eth0 -d 1000

For more detailed information on each argument and additional options, refer to the project's README or use the --help option with the fluere command.