Skip to content

Instantly share code, notes, and snippets.

@bysnupy
Last active April 8, 2021 14:12
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save bysnupy/1e96d77a48f330bca85b496239ac6031 to your computer and use it in GitHub Desktop.
Save bysnupy/1e96d77a48f330bca85b496239ac6031 to your computer and use it in GitHub Desktop.
$ grep 31566 ./AWS_ACCOUNT_ID_vpcflowlogs_ap-northeast-1_fl-0e34a6dfefc0db8a9_20210405T0635Z_6427407c.log
// Columns of the VPC Flow logs
version account-id interface-id srcaddr dstaddr srcport dstport protocol packets bytes start end action log-status

// ELB ENI
2 AWS_ACCOUNT_ID eni-047359708552d4999 10.0.134.187 10.0.14.231 31790 31566 6 4 562 1617604407 1617604466 ACCEPT OK
2 AWS_ACCOUNT_ID eni-047359708552d4999 10.0.14.231 10.0.134.187 31566 31790 6 7 988 1617604407 1617604466 ACCEPT OK

// EC2 ENI
2 AWS_ACCOUNT_ID eni-0622b40e5b07b6f99 10.0.14.231 10.0.134.187 31566 31790 6 7 988 1617604502 1617604514 ACCEPT OK
2 AWS_ACCOUNT_ID eni-0622b40e5b07b6f99 10.0.134.187 10.0.14.231 31790 31566 6 4 562 1617604502 1617604514 ACCEPT OK
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment