I am learning ipfix and found a cmd like this:

tshark -r ipfix.cap -n -d udp.port==4379,cflow -O cflow

What does the cflow part mean here?

I was also told to filter cflow if I use Wireshark in Windows.

  • 1
    You have found a command where? You were told by whom? In short, this lacks details... Jun 2, 2018 at 20:14
  • @PatrickMevzek thanks i have known the answer, cflow means Cisco flow.
    – sky
    Jun 4, 2018 at 23:44
  • yes I know that, but I was asking about your command since its form was strange to me. If you have the answer,please post it yourself, and validate it so that it will close the question. Jun 5, 2018 at 0:08
  • 2
    I know tshark I just do not see how your command can work. Anyway as I said please post your answer if you have it (as an answer, not as a comment) and accept it so that the question does not remain open. Jun 5, 2018 at 1:06
  • 1
    Did any answer help you? if so, you should accept the answer so that the question does not keep popping up forever, looking for an answer. Alternatively, you could post and accept your own answer.
    – Ron Maupin
    Dec 25, 2021 at 23:01

1 Answer 1


Cflow means Cisco flow. If i can collect some data through that command then tshark works.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.