I am learning ipfix and found a cmd like this:

tshark -r ipfix.cap -n -d udp.port==4379,cflow -O cflow

What does the cflow part mean here?

I was also told to filter cflow if I use Wireshark in Windows.

  • You have found a command where? You were told by whom? In short, this lacks details... Jun 2 '18 at 20:14
  • @PatrickMevzek thanks i have known the answer, cflow means Cisco flow.
    – sky
    Jun 4 '18 at 23:44
  • yes I know that, but I was asking about your command since its form was strange to me. If you have the answer,please post it yourself, and validate it so that it will close the question. Jun 5 '18 at 0:08
  • @PatrickMevzek it's from VMware nsx. I learned how to configure ipfix in nsx and a friend told me i can use those command to collect traffic in Linux. Or collect traffic in windows by filter cflow.
    – sky
    Jun 5 '18 at 0:43
  • 1
    I know tshark I just do not see how your command can work. Anyway as I said please post your answer if you have it (as an answer, not as a comment) and accept it so that the question does not remain open. Jun 5 '18 at 1:06

Cflow means Cisco flow. If i can collect some data through that command then tshark works.

  • Please accept your answer.
    – Ron Maupin
    Dec 19 '20 at 0:04

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.