How are the SiLK Flow files organized and written to disk?
SiLK Flows are stored in binary files, where each file corresponds to unique class-type-sensor-hour tuple. Multiple data repositories may exist on a machine; however, rwfilter is only capable of examining a single data repository per invocation. A default repository location is compiled into rwfilter. (This default is set by the –enable-data-rootdir=DIR switch to configure and defaults to /data). You may tell rwfilter to use a different repository by setting the SILK_DATA_ROOTDIR environment variable or specifying the –data-rootdir switch to rwfilter. The structure of the directory tree beneath the root is determined by the path-format entry in the silk.conf file for each data repository.
