---
name: "ovn-detrace"
section: "1"
platform: "linux"
package: "ovn-common"
version: "25.03.0-1"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/ovn-detrace"
---

# ovn-detrace(1)

convert \`\`ovs-appctl ofproto/trace'' output to combine OVN logical flow information.

## NAME

ovn-detrace - convert \`\`ovs-appctl ofproto/trace'' output to combine OVN logical flow information.

## SYNOPSIS

**ovn-detrace \<** *file*

- Common options:

  \[**-h** \| **--help**\] \[**-V** \| **--version**\]

## DESCRIPTION

The **ovn-detrace** program reads **ovs-appctl ofproto/trace** output on stdin, looking for flow cookies, and displays for each cookie the OVN south-bound records that contributed to its creation. It further displays the related north-bound information when applicable, e.g., the ACL that generated the logical flow that gets translated to an OpenFlow rule with a given cookie.

## OPTIONS

- **-h**

  - **--help**

  Prints a brief help message to the console.

- **-V**

  - **--version**

  Prints version information to the console.

- **--ovnsb=***server*

  The OVN Southbound DB remote to contact.  If the **OVN\_SB\_DB** environment variable is set, its value is used as the default. Otherwise, the default is **unix:@RUNDIR@/ovnsb\_db.sock**, but this default is unlikely to be useful outside of single-machine OVN test environments.

- **--ovnnb=***server*

  The OVN Northbound DB remote to contact.  If the **OVN\_NB\_DB** environment variable is set, its value is used as the default. Otherwise, the default is **unix:@RUNDIR@/ovnnb\_db.sock**, but this default is unlikely to be useful outside of single-machine OVN test environments.

- **--ovs=**

  Also decode flow information (like OVS ofport) from the flows by connecting to the OVS DB.

- **--no-leader-only**

  Connect to any cluster member, not just the leader. The option works for OVN Southbound DB and OVN Northbound DB.

- **--ovsdb=***server*

  The OVS DB remote to contact if **--ovs** is present.  If the **OVS\_RUNDIR** environment variable is set, its value is used as the default. Otherwise, the default is **unix:@RUNDIR@/db.sock**, but this default is unlikely to be useful outside of single-machine OVN test environments.

- **-p** *privkey.pem*

  - **--private-key=***privkey.pem*

  Specifies a PEM file containing the private key used as **ovn-detrace**'s identity for outgoing SSL/TLS connections.

- **-c** *cert.pem*

  - **--certificate=***cert.pem*

  Specifies a PEM file containing a certificate that certifies the private key specified on **-p** or **--private-key** to be trustworthy.  The certificate must be signed by the certificate authority (CA) that the peer in SSL/TLS connections will use to verify it.

- **-C** *cacert.pem*

  - **--ca-cert=***cacert.pem*

  Specifies a PEM file containing the CA certificate that **ovn-detrace** should use to verify certificates presented to it by SSL/TLS peers.  (This may be the same certificate that SSL/TLS peers use to verify the certificate specified on **-c** or **--certificate**, or it may be a different one, depending on the PKI design in use.)

## SEE ALSO

[**ovs-appctl**(8)](/ovs-appctl/8.md),[**ovn-sbctl**(8)](/ovn-sbctl/8.md),[**ovn-nbctl**(8)](/ovn-nbctl/8.md),[**ovn-trace**(8)](/ovn-trace/8.md)