I am learning ipfix and found a cmd like this:

tshark -r ipfix.cap -n -d udp.port==4379,cflow -O cflow

What does the cflow part mean here?

I was also told to filter cflow if I use Wireshark in Windows.

  • 1
    You have found a command where? You were told by whom? In short, this lacks details... Commented Jun 2, 2018 at 20:14
  • @PatrickMevzek thanks i have known the answer, cflow means Cisco flow.
    – sky
    Commented Jun 4, 2018 at 23:44
  • yes I know that, but I was asking about your command since its form was strange to me. If you have the answer,please post it yourself, and validate it so that it will close the question. Commented Jun 5, 2018 at 0:08
  • 2
    I know tshark I just do not see how your command can work. Anyway as I said please post your answer if you have it (as an answer, not as a comment) and accept it so that the question does not remain open. Commented Jun 5, 2018 at 1:06
  • 1
    Did any answer help you? if so, you should accept the answer so that the question does not keep popping up forever, looking for an answer. Alternatively, you could post and accept your own answer.
    – Ron Maupin
    Commented Dec 25, 2021 at 23:01

1 Answer 1


Cflow means Cisco flow. If i can collect some data through that command then tshark works.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.