Manual Pages

IPFIX Packing

mothra-packer

Read IPFIX input files from an incoming area, categorize the records according to rules specified in a packing logic file, and write the records to files in a Mothra IPFIX repository for later queries.

mothra-invariantpacker

Read IPFIX input files generated by super_mediator in "invariant mode" from an incoming area, categorize the files according to values encoded into their filenames, and write the records to these files in a Mothra IPFIX repository for later queries.

Repository Modification Utilities

mothra-filejoiner

Reduce the number of files within a Mothra IPFIX repository by finding files in the same partition with the same time information in their filenames and combining them into a single new file. For example, if files are split up by hour there may actually be several files for a single hour's data in a partition. After running this tool, there would be only one file per hour. This program does not change the time period covered by each file.

mothra-rollupday

Reduce the number of files within a Mothra IPFIX repository by finding files in the same partition on the same day and combining them into a single new file which covers the entire day. For example, if files are split up by hour then after running this tool, there would be only one file for the entire day.

mothra-repacker

Modify the organization of a Mothra IPFIX repository to partition the data differently, or generally to use new packing logic for the repository. This can effectively change anything about the repository's organization.

mothra-filesanitizer

Modify the individual records within files in a Mothra IPFIX repository by remove specific IPFIX Information Elements from every record (and subrecords) in the files.