nfdump

netflow capture daemon

Install

All systems
curl cmd.cat/nfdump.sh
Debian Debian
apt-get install nfdump
Ubuntu
apt-get install nfdump
Alpine
apk add nfdump
image/svg+xml Kali Linux
apt-get install nfdump
Fedora
dnf install nfdump
Windows (WSL2)
sudo apt-get update sudo apt-get install nfdump
OS X
brew install nfdump
Raspbian
apt-get install nfdump
Docker
docker run cmd.cat/nfdump nfdump powered by Commando

nfdump

netflow capture daemon

Collects and processes netflow data with command line tools. Collected netflow data is stored in filesystem and is limited by available storage space only. Tools are optimized for speed and filtering. nfcapd reads netflow v5, v7, v9 and IPFIX flows transparently. You need one nfcapd process for each netflow stream.

nfdump-dbg

netflow capture daemon tools compiled with debugging symbols

Collects and processes netflow data with command line tools. Collected netflow data is stored in filesystem and is limited by available storage space only. Tools are optimized for speed and filtering. nfcapd reads netflow v5, v7, v9 and IPFIX flows transparently. You need one nfcapd process for each netflow stream. Optional support for sFlow and flow-tools to nfdump conversion utilities are available but needs re-compiliation.