ovs-ofctl: OpenFlow switch management utility
usage: ovs-ofctl [OPTIONS] COMMAND [ARG...]
For OpenFlow switches:
show SWITCH show OpenFlow information
dump-desc SWITCH print switch description
dump-tables SWITCH print table stats
dump-table-features SWITCH print table features
dump-table-desc SWITCH print table description (OF1.4+)
mod-port SWITCH IFACE ACT modify port behavior
mod-table SWITCH MOD modify flow table behavior
OF1.1/1.2 MOD: controller, continue, drop
OF1.4+ MOD: evict, noevict, vacancy:low,high, novacancy
get-frags SWITCH print fragment handling behavior
set-frags SWITCH FRAG_MODE set fragment handling behavior
FRAG_MODE: normal, drop, reassemble, nx-match
dump-ports SWITCH [PORT] print port statistics
dump-ports-desc SWITCH [PORT] print port descriptions
dump-flows SWITCH print all flow entries
dump-flows SWITCH FLOW print matching FLOWs
dump-aggregate SWITCH print aggregate flow statistics
dump-aggregate SWITCH FLOW print aggregate stats for FLOWs
queue-stats SWITCH [PORT [QUEUE]] dump queue stats
add-flow SWITCH FLOW add flow described by FLOW
add-flows SWITCH FILE add flows from FILE
mod-flows SWITCH FLOW modify actions of matching FLOWs
del-flows SWITCH [FLOW] delete matching FLOWs
replace-flows SWITCH FILE replace flows with those in FILE
diff-flows SOURCE1 SOURCE2 compare flows from two sources
packet-out SWITCH IN_PORT ACTIONS PACKET...
execute ACTIONS on PACKET
monitor SWITCH [MISSLEN] [invalid_ttl] [watch:[...]]
print packets received from SWITCH
snoop SWITCH snoop on SWITCH and its controller
add-group SWITCH GROUP add group described by GROUP
add-groups SWITCH FILE add group from FILE
[--may-create] mod-group SWITCH GROUP modify specific group
del-groups SWITCH [GROUP] delete matching GROUPs
insert-buckets SWITCH [GROUP] add buckets to GROUP
remove-buckets SWITCH [GROUP] remove buckets from GROUP
dump-group-features SWITCH print group features
dump-groups SWITCH [GROUP] print group description
dump-group-stats SWITCH [GROUP] print group statistics
queue-get-config SWITCH [PORT] print queue config for PORT
add-meter SWITCH METER add meter described by METER
mod-meter SWITCH METER modify specific METER
del-meters SWITCH [METER] delete meters matching METER
dump-meters SWITCH [METER] print METER configuration
meter-stats SWITCH [METER] print meter statistics
meter-features SWITCH print meter features
add-tlv-map SWITCH MAP add TLV option MAPpings
del-tlv-map SWITCH [MAP] delete TLV option MAPpings
dump-tlv-map SWITCH print TLV option mappings
dump-ipfix-bridge SWITCH print ipfix stats of bridge
dump-ipfix-flow SWITCH print flow ipfix of a bridge
ct-flush-zone SWITCH ZONE flush conntrack entries in ZONE
ct-flush SWITCH [ZONE] [mark=X[/M]] [labels=Y[/N]]
[CT_ORIG_TUPLE [CT_REPLY_TUPLE]]
flush conntrack entries specified
by CT_ORIG/REPLY_TUPLE, ZONE, mark
and labels
For OpenFlow switches and controllers:
probe TARGET probe whether TARGET is up
ping TARGET [N] latency of N-byte echos
benchmark TARGET N COUNT bandwidth of COUNT N-byte echos
SWITCH or TARGET is an active OpenFlow connection method.
Other commands:
ofp-parse FILE print messages read from FILE
ofp-parse-pcap PCAP print OpenFlow read from PCAP
Active OpenFlow connection methods:
tcp:HOST[:PORT] PORT (default: 6653) at remote HOST
ssl:HOST[:PORT] SSL/TLS PORT (default: 6653) at remote HOST
unix:FILE Unix domain socket named FILE
PKI configuration (required to use SSL/TLS):
-p, --private-key=FILE file with private key
-c, --certificate=FILE file with certificate for private key
-C, --ca-cert=FILE file with peer CA certificate
Daemon options:
--detach run in background as daemon
--monitor creates a process to monitor this daemon
--user=username[:group] changes the effective daemon user:group
--no-chdir do not chdir to '/'
--pidfile[=FILE] create pidfile (default: /run/openvswitch/ovs-ofctl.pid)
--overwrite-pidfile with --pidfile, start even if already running
OpenFlow version options:
-V, --version display version information
-O, --protocols set allowed OpenFlow versions
(default: OpenFlow10, OpenFlow11, OpenFlow12, OpenFlow13, OpenFlow14, OpenFlow15)
Logging options:
-vSPEC, --verbose=SPEC set logging levels
-v, --verbose set maximum verbosity level
--log-file[=FILE] enable logging to specified FILE
(default: /var/log/openvswitch/ovs-ofctl.log)
--syslog-method=(libc|unix:file|udp:ip:port)
specify how to send messages to syslog daemon
--syslog-target=HOST:PORT also send syslog msgs to HOST:PORT via UDP
Other options:
--strict use strict match for flow commands
--read-only do not execute read/write commands
--readd replace flows that haven't changed
-F, --flow-format=FORMAT force particular flow format
-P, --packet-in-format=FRMT force particular packet in format
-m, --more be more verbose printing OpenFlow
--timestamp (monitor, snoop) print timestamps
-t, --timeout=SECS give up after SECS seconds
--sort[=field] sort in ascending order
--rsort[=field] sort in descending order
--names show port names instead of numbers
--no-names show port numbers, but not names
--unixctl=SOCKET set control socket name
--color[=always|never|auto] control use of color in output
-h, --help display this help message
-V, --version display version information
Options (36)
| Option | Description | Source |
|---|---|---|
-p, --private-key FILE | Specifies a PEM file containing the private key used as ovs-ofctl's identity for outgoing SSL/TLS connections. | help + man + man |
-c, --certificate FILE | Specifies a PEM file containing a certificate that certifies the private key specified on -p or --private-key to be trustworthy. | help + man + man |
-C, --ca-cert FILE | Specifies a PEM file containing the CA certificate that ovs-ofctl should use to verify certificates presented to it by SSL/TLS peers. | help + man + man |
--detach | Runs ovs-ofctl as a background process. | help + man |
--monitor | Creates an additional process to monitor the ovs-ofctl daemon. | help + man |
--no-chdir | By default, when --detach is specified, ovs-ofctl changes its current working directory to the root directory after it detaches. | help + man |
--pidfile FILE | create pidfile (default: /run/openvswitch/ovs-ofctl.pid) | help |
--overwrite-pidfile | By default, when --pidfile is specified and the specified pidfile already exists and is locked by a running process, ovs-ofctl refuses to start. | help + man |
-V, --version | Prints version information to the console. | help + man + man |
-O, --protocols | set allowed OpenFlow versions (default: OpenFlow10, OpenFlow11, OpenFlow12, OpenFlow13, OpenFlow14, OpenFlow15) | help |
-vSPEC, --verbose SPEC | Sets the maximum logging verbosity level, equivalent to --verbose=dbg. | help + man |
--log-file FILE | enable logging to specified FILE (default: /var/log/openvswitch/ovs-ofctl.log) | help |
--syslog-method (libc|unix:file|udp:ip:port) | Specify method how syslog messages should be sent to syslog daemon. | help + man |
--syslog-target HOST:PORT | Send syslog messages to UDP port on host, in addition to the system syslog. | help + man |
--strict | Uses strict matching when running flow modification commands. | help + man |
--read-only | Do not execute read/write commands. | help + man |
--readd | replace flows that haven't changed | help |
-F, --flow-format FORMAT | force particular flow format | help |
-m, --more | Increases the verbosity of OpenFlow messages printed and logged by ovs-ofctl commands. | help + man + man |
--timestamp | Print a timestamp before each received packet. | help + man |
-t, --timeout SECS | give up after SECS seconds | help |
--sort field | sort in ascending order | help |
--rsort field | sort in descending order | help |
--names | show port names instead of numbers | help + man |
--no-names | Every OpenFlow port has a name and a number, and every OpenFlow flow table has a number and sometimes a name. | help + man |
--unixctl SOCKET | Sets the name of the control socket on which ovs-ofctl listens for runtime management commands (see RUNTIME MANAGEMENT COMMANDS, below). | help + man |
-h, --help | Prints a brief help message to the console. | help + man + man |
--stats | (in the manual page but not in --help) | man |
--no-stats | The dump-flows command by default, or with --stats, includes flow duration, packet and byte counts, and idle and hard age in its output. (in the manual page but not in --help) | man |
--bundle | Execute flow mods as an OpenFlow 1.4 atomic bundle transaction. (in the manual page but not in --help) | man |
-P format | (in the manual page but not in --help) | man |
--packet-in-format format | ovs-ofctl supports the following packet-in'' formats, in order of increasing capability: (in the manual page but not in --help) | man |
--no-self-confinement | By default daemon will try to self-confine itself to work with files under well-known directories determined during build. (in the manual page but not in --help) | man |
--user | Causes ovs-ofctl to run as a different user specified in "user:group", thus dropping most of the root privileges. (in the manual page but not in --help) | man |
--ssl-server-name servername | Specifies the server name to use for TLS Server Name Indication (SNI). (in the manual page but not in --help) | man |
-v | (in the manual page but not in --help) | man |