Module	NETFLOW_RPT_CLD
Ident	"NETFLOW_RPT_CLD V01-00"

!++TITLE:	NETFLOW_RPT_CLD
!
!  AUTHOR:	Ruslan R. Laishev
!		Copyright 2003-2009, Ruslan R. Laishev
!
!  MODIFICATION HISTORY:
!
!	 3-JUN-2003	RRL	Initial coding.
!	10-SEP-2003	RRL	Added /SYSIP option, an IP address originated a netflow packet.
!	
!--

define	type	protocol_options
	keyword	ip
	keyword	icmp
	keyword	igmp
	keyword	tcp
	keyword	udp
	keyword	all

define	type	interface_options
	keyword	input,label=intf_inp,value (type=$number,required)
	keyword	output,label=intf_out,value (type=$number,required)

define	verb	netflow_rpt
	routine	netflow_rpt

	parameter p1,label=input,value (type=$file,default="netflow_data")

	qualifier	src_ip,value (required)
	qualifier	src_ip_mask, value (required)
	qualifier	dst_ip,value (required)
	qualifier	dst_ip_mask,value (required)
	qualifier	src_port,value (type=$number,required)
	qualifier	dst_port,value (type=$number,required)
	qualifier	protocol, value (type=protocol_options,required)
	qualifier	interface, value (type=interface_options,required)
	qualifier	nexthop,value (required)
	qualifier	sysip, value (required)

	qualifier	before,value (type=$datetime,default="today")
	qualifier	since,value (type=$datetime,default="today")
	qualifier	output,value (type=$file,default="sys$output")

	qualifier	summary
	qualifier	append

	qualifier	continuous
	qualifier	interval, value (type=$number,required)

	disallow protocol.ip and  (dst_port or src_port)
	disallow protocol.icmp and  (dst_port or src_port)
	disallow protocol.all and  (dst_port or src_port)
	disallow (interval or continuous) and output