macOS
Homebrewverifiziert · 100%
brew install nfdumplocal Homebrew formula metadata
MacPortsverifiziert · 94%
sudo port install nfdumpMacPorts ports tree · net/nfdump/Portfile · Quelle: api.github.com
brew
nfdump mit Homebrew, apk, apt, dnf, MacPorts, Nix, zypper installieren
Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für nfdump in AI-Agent-Workflows.
Installation
Weitere Installationsbefehle
Linux
Alpine Linux apkverifiziert · 92%
sudo apk add nfdumpAlpine Linux edge package indexes · nfdump · Quelle: dl-cdn.alpinelinux.org
Debian aptverifiziert · 92%
sudo apt install nfdumpDebian stable package indexes · nfdump · Quelle: deb.debian.org
Fedora dnfverifiziert · 92%
sudo dnf install nfdumpFedora Rawhide package metadata · nfdump · Quelle: dl.fedoraproject.org
Nixverifiziert · 92%
nix profile install nixpkgs#nfdumpnixpkgs package indexes · pkgs/by-name/nf/nfdump/package.nix · Quelle: api.github.com
openSUSE zypperverifiziert · 92%
sudo zypper install nfdumpopenSUSE Tumbleweed package metadata · nfdump · Quelle: download.opensuse.org
Überblick
Paketzusammenfassung
Tools to collect and process netflow data on the command-line
Projektlinks
Befehle und Aliase
- geolookup
- nfanon
- nfcapd
- nfdump
- nfexpire
- nfreplay
- sfcapd
- torlookup
- updateGeoDB.sh
- updateTorDB.sh
Verlauf
Projektgeschichte und Nutzung
nfdump is a long-lived command-line toolkit for collecting, storing, replaying, filtering, aggregating, and analyzing NetFlow, IPFIX, and sFlow data. The core workflow pairs collector daemons such as `nfcapd` and `sfcapd` with `nfdump` queries over rotated binary flow files.
Projektgeschichte
The legacy SourceForge page says the project moved to GitHub and describes the original design: collect flow data to disk first, organize it in timestamped files, then analyze historical or continuous traffic with a fast tcpdump-like filter language. FreshPorts records the FreeBSD port being added on 2004-11-07 with version 1.1 and NetFlow v5/v7 support; later documentation and packaging show support expanded to v9, IPFIX, and sFlow.
The GitHub README describes the 1.7.x series codename `unicorn`, compatibility with files created by nfdump 1.6.18 or newer, and conversion paths for older legacy flow files.
Adoptionsgeschichte
nfdump is an infrastructure package rather than a trendy CLI. It appears across Homebrew, Debian, Ubuntu, Fedora, Alpine, Nix, MacPorts, and FreeBSD ports, and is tied historically to NfSen. The GitHub repository showed 1,405 commits when researched. Homebrew's API generated on 2026-07-01 reported 233 installs-on-request in the preceding 365 days.
Wie es verwendet wird
Practical users run `nfcapd` on UDP ports fed by routers, firewalls, or switches, rotate files every few minutes, and query them later with expressions such as `nfdump -r flowfile 'src ip 192.0.2.1 and dst port 443'`. The Debian nfcapd manpage says it accepts NetFlow v1, v5/v7, v9, and IPFIX transparently and works with exporters including Cisco Flexible NetFlow, ASA firewalls, NAT event logging, Juniper, VMware, Palo Alto, and yaf.
Warum Paket-Nerds sich dafür interessieren
nfdump matters because it keeps the packet-capture mental model for flow records: small composable commands, tcpdump-like filters, files you can retain or expire, and text/CSV/JSON/custom output for shell pipelines and monitoring integrations.
Zeitleiste
- 2004-11-07: FreshPorts records the FreeBSD nfdump port being added.
- 2014-12-01: legacy SourceForge page listed 1.6.13 as the stable version and pointed users to GitHub.
- 2026-07-01: Homebrew formula API generated data for nfdump 1.7.8.
Related projects
- NfSen
- NetFlow
- IPFIX
- sFlow
- nfcapd
- sfcapd
- nfexpire
- nfreplay
Quellen
Sicherheitslage
Risikostufe: yellow
generalized runtime or code generation signal.
Risikoklassifikator
yellow Risiko · mittel Konfidenz · runtime
Warum
- generalized runtime or code generation signal
Signale
- text:repl
Installationsverhalten
- In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
- Homebrew-Bottle-Metadaten sind für 6 Plattformziele verfügbar.
- Build-Metadaten listen 4 Build-Abhängigkeiten.
Empfohlene Prüfung
Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.
Executables
Installierte Executables
| Befehl | Art | Sichtbarkeit | Hinweis |
|---|---|---|---|
geolookup | cli | globales Executable | |
nfanon | cli | globales Executable | |
nfcapd | cli | globales Executable | |
nfdump | cli | globales Executable | |
nfexpire | cli | globales Executable | |
nfreplay | cli | globales Executable | |
sfcapd | cli | globales Executable | |
torlookup | cli | globales Executable | |
updateGeoDB.sh | cli | globales Executable | |
updateTorDB.sh | cli | globales Executable |
Aktualität
Version und Aktualität
Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.
Seite generiert2026-07-25
Manager-Version1.7.8
Manager aktualisiert2026-04-28
lokale DatenOK
Upstreamaktuell
neueste erkannte Versionv1.7.8
https://github.com/phaag/nfdump
- OKEs wurden keine Aktualitätswarnungen generiert.
Installationsmetadaten
Paketmetadaten
| Paketschlüssel | brew:nfdump |
|---|---|
| Version | 1.7.8 |
| Paketmanager | Homebrew |
| Paketmanager-Seite | https://formulae.brew.sh/formula/nfdump |
| Homepage | https://github.com/phaag/nfdump |
| Repository | https://github.com/phaag/nfdump |
| Upstream-Dokumentation | https://github.com/phaag/nfdump#readme |
| Lizenz | BSD-3-Clause |
| Quellarchiv | https://github.com/phaag/nfdump/archive/refs/tags/v1.7.8.tar.gz |
| Zuletzt aktualisiert | 2026-04-28T13:34:16Z |
| Pulse | updated |
| Build-Abhängigkeiten | autoconf, automake, libtool, pkgconf |
| Von macOS bereitgestellte Bibliotheken | bzip2, libpcap |
| Bottle | verfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | nicht definiert |
| Dienst | keiner deklariert |
Registry-Fakten
Details aus der Quelldatenbank
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | nfdump |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
Source-Datenbank-Treffer
Andere Paketmanager-Einträge
Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.
Debian apt95%
nfdump 1.7.5-2+deb13u1
netflow capture daemon
https://github.com/phaag/nfdump/
sudo apt install nfdump- Section: net
- Architecture: amd64
- 6 Abhängigkeiten
- normalized package name match
- Abgeglichen nach: Nfdump
Debian apt95%
nfdump-sflow 1.7.5-2+deb13u1
sflow collector daemon
https://github.com/phaag/nfdump/
sudo apt install nfdump-sflow- Section: net
- Architecture: amd64
- Source Package: nfdump
- 5 Abhängigkeiten
- normalized package name match
- Abgeglichen nach: Nfdump
Nix95%
nfdump
nix profile install nixpkgs#nfdump- normalized package name match
- Abgeglichen nach: Nfdump
Ubuntu apt95%
nfdump 1.7.3-1build2
netflow capture daemon
https://github.com/phaag/nfdump/
sudo apt install nfdump- Section: universe/net
- Architecture: amd64
- 5 Abhängigkeiten
- normalized package name match
- Abgeglichen nach: Nfdump
Ubuntu apt95%
nfdump-sflow 1.7.3-1build2
sflow collector daemon
https://github.com/phaag/nfdump/
sudo apt install nfdump-sflow- Section: universe/net
- Architecture: amd64
- Source Package: nfdump
- 3 Abhängigkeiten
- normalized package name match
- Abgeglichen nach: Nfdump
apk95%
nfdump 1.7.6-r1
Tools to collect and process netflow data
https://github.com/phaag/nfdump
sudo apk add nfdump- License: BSD-3-Clause
- Architecture: x86_64
- Source Package: nfdump
- 1 Abhängigkeiten
- 1 stellt bereit
- normalized package name match
- Abgeglichen nach: Nfdump
apk95%
nfdump-dbg 1.7.6-r1
Tools to collect and process netflow data (debug symbols)
https://github.com/phaag/nfdump
sudo apk add nfdump-dbg- License: BSD-3-Clause
- Architecture: x86_64
- Source Package: nfdump
- 1 Abhängigkeiten
- normalized package name match
- Abgeglichen nach: Nfdump
apk95%
nfdump-doc 1.7.6-r1
Tools to collect and process netflow data (documentation)
https://github.com/phaag/nfdump
sudo apk add nfdump-doc- License: BSD-3-Clause
- Architecture: x86_64
- Source Package: nfdump
- normalized package name match
- Abgeglichen nach: Nfdump
apk95%
nfdump-openrc 1.7.6-r1
Tools to collect and process netflow data (OpenRC init scripts)
https://github.com/phaag/nfdump
sudo apk add nfdump-openrc- License: BSD-3-Clause
- Architecture: x86_64
- Source Package: nfdump
- normalized package name match
- Abgeglichen nach: Nfdump
apk95%
nfdump-static 1.7.6-r1
Tools to collect and process netflow data (static library)
https://github.com/phaag/nfdump
sudo apk add nfdump-static- License: BSD-3-Clause
- Architecture: x86_64
- Source Package: nfdump
- normalized package name match
- Abgeglichen nach: Nfdump
apk95%
nfprofile 1.7.6-r1
Create views of the data with NFdump filters
https://github.com/phaag/nfdump
sudo apk add nfprofile- License: BSD-3-Clause
- Architecture: x86_64
- Source Package: nfdump
- 1 Abhängigkeiten
- 1 stellt bereit
- normalized package name match
- Abgeglichen nach: Nfdump
apk95%
sfcapd 1.7.6-r1
sFlow collector
https://github.com/phaag/nfdump
sudo apk add sfcapd- License: BSD-3-Clause
- Architecture: x86_64
- Source Package: nfdump
- 1 Abhängigkeiten
- 1 stellt bereit
- normalized package name match
- Abgeglichen nach: Nfdump
apk95%
sfcapd-openrc 1.7.6-r1
Tools to collect and process netflow data (OpenRC init scripts)
https://github.com/phaag/nfdump
sudo apk add sfcapd-openrc- License: BSD-3-Clause
- Architecture: x86_64
- Source Package: nfdump
- normalized package name match
- Abgeglichen nach: Nfdump
dnf95%
nfdump 1.7.8-1.fc45
NetFlow collecting and processing tools
https://github.com/phaag/nfdump
sudo dnf install nfdump- License: BSD-3-Clause AND GPL-2.0-or-later
- Category: Unspecified
- Architecture: x86_64
- Source Package: nfdump
- 8 Abhängigkeiten
- 1 stellt bereit
- normalized package name match
- Abgeglichen nach: Nfdump
dnf95%
nfdump-libs 1.7.8-1.fc45
Libraries used by NFDUMP packages
https://github.com/phaag/nfdump
sudo dnf install nfdump-libs- License: BSD-3-Clause AND GPL-2.0-or-later
- Category: Unspecified
- Architecture: x86_64
- Source Package: nfdump
- 4 Abhängigkeiten
- 3 stellt bereit
- normalized package name match
- Abgeglichen nach: Nfdump
zypper95%
libnfdump-1_7_8 1.7.8-1.1
Shared Library part of libnfdump
https://github.com/phaag/nfdump
sudo zypper install libnfdump-1_7_8- License: BSD-3-Clause
- Category: System/Libraries
- Architecture: x86_64
- Source Package: nfdump
- 2 Abhängigkeiten
- 2 stellt bereit
- normalized package name match
- Abgeglichen nach: Nfdump
Quellspur
Aus Repository-Daten generiert
Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.
Combined YAML source
View the package source record on GitHub.
Verwendete Quellen
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment