# Install nfdump Tools to collect and process netflow data on the command-line. Version 1.7.8 via Homebrew; verified 2026-04-28. ## Install ```sh sudo av install brew:nfdump ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install nfdump ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install nfdump ``` Evidence: MacPorts ports tree: net/nfdump/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add nfdump ``` Evidence: Alpine Linux edge package indexes: nfdump from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install nfdump ``` Evidence: Debian stable package indexes: nfdump from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install nfdump ``` Evidence: Fedora Rawhide package metadata: nfdump from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#nfdump ``` Evidence: nixpkgs package indexes: pkgs/by-name/nf/nfdump/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - zypper (92%): ```sh sudo zypper install libnfdump-1_7_8 ``` Evidence: openSUSE Tumbleweed package metadata: libnfdump-1_7_8 from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst ## Package Facts - **Package key:** brew:nfdump - **Package manager:** Homebrew - **Package manager URL:** - **Version:** 1.7.8 - **Source summary:** Tools to collect and process netflow data on the command-line - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** BSD-3-Clause - **Source archive:** - **Last updated:** 2026-04-28T13:34:16Z - **Generated:** 2026-06-10T07:18:26+00:00 ## Executables - geolookup (cli) - nfanon (cli) - nfcapd (cli) - nfdump (cli) - nfexpire (cli) - nfreplay (cli) - sfcapd (cli) - torlookup (cli) - updateGeoDB.sh (cli) - updateTorDB.sh (cli) - geolookup (alias) - nfanon (alias) - nfcapd (alias) - nfdump (alias) - nfexpire (alias) - nfreplay (alias) - sfcapd (alias) - torlookup (alias) - updateGeoDB.sh (alias) - updateTorDB.sh (alias) ## Build Dependencies - autoconf - automake - libtool - pkgconf ## macOS Provided Libraries - bzip2 - libpcap ## Install Behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-06-10 - Package-manager version: 1.7.8 - Package-manager updated: 2026-04-28 - Local data status: ok - Upstream repository: https://github.com/phaag/nfdump - Upstream latest detected: v1.7.8 (current) ## セキュリティノート generalized runtime or code generation signal. - **Geiger risk:** yellow / medium - generalized runtime or code generation signal ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** nfdump - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Debian apt - nfdump - 1.7.5-2+deb13u1: normalized package name match | Debian stable package indexes: nfdump from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | netflow capture daemon | https://github.com/phaag/nfdump/ - Debian apt - nfdump-sflow - 1.7.5-2+deb13u1: normalized package name match | Debian stable package indexes: nfdump-sflow from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | sflow collector daemon | https://github.com/phaag/nfdump/ - Nix - nfdump: normalized package name match | nixpkgs package indexes: pkgs/by-name/nf/nfdump/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - nfdump - 1.7.3-1build2: normalized package name match | Ubuntu 24.04 LTS package indexes: nfdump from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | netflow capture daemon | https://github.com/phaag/nfdump/ - Ubuntu apt - nfdump-sflow - 1.7.3-1build2: normalized package name match | Ubuntu 24.04 LTS package indexes: nfdump-sflow from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | sflow collector daemon | https://github.com/phaag/nfdump/ - apk - nfdump - 1.7.6-r1: normalized package name match | Alpine Linux edge package indexes: nfdump from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Tools to collect and process netflow data | https://github.com/phaag/nfdump - apk - nfdump-dbg - 1.7.6-r1: normalized package name match | Alpine Linux edge package indexes: nfdump-dbg from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Tools to collect and process netflow data (debug symbols) | https://github.com/phaag/nfdump - apk - nfdump-doc - 1.7.6-r1: normalized package name match | Alpine Linux edge package indexes: nfdump-doc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Tools to collect and process netflow data (documentation) | https://github.com/phaag/nfdump - apk - nfdump-openrc - 1.7.6-r1: normalized package name match | Alpine Linux edge package indexes: nfdump-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Tools to collect and process netflow data (OpenRC init scripts) | https://github.com/phaag/nfdump - apk - nfdump-static - 1.7.6-r1: normalized package name match | Alpine Linux edge package indexes: nfdump-static from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Tools to collect and process netflow data (static library) | https://github.com/phaag/nfdump - apk - nfprofile - 1.7.6-r1: normalized package name match | Alpine Linux edge package indexes: nfprofile from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Create views of the data with NFdump filters | https://github.com/phaag/nfdump - apk - sfcapd - 1.7.6-r1: normalized package name match | Alpine Linux edge package indexes: sfcapd from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | sFlow collector | https://github.com/phaag/nfdump - apk - sfcapd-openrc - 1.7.6-r1: normalized package name match | Alpine Linux edge package indexes: sfcapd-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Tools to collect and process netflow data (OpenRC init scripts) | https://github.com/phaag/nfdump - dnf - nfdump - 1.7.8-1.fc45: normalized package name match | Fedora Rawhide package metadata: nfdump from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst | NetFlow collecting and processing tools | https://github.com/phaag/nfdump - dnf - nfdump-libs - 1.7.8-1.fc45: normalized package name match | Fedora Rawhide package metadata: nfdump-libs from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst | Libraries used by NFDUMP packages | https://github.com/phaag/nfdump - zypper - libnfdump-1_7_8 - 1.7.8-1.1: normalized package name match | openSUSE Tumbleweed package metadata: libnfdump-1_7_8 from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst | Shared Library part of libnfdump | https://github.com/phaag/nfdump ## Related Links - [Source-control packages](https://www.automicvault.com/ja/pkg/source-control-tools/) - Belongs to a source-control command family. - [Secret-risk packages](https://www.automicvault.com/ja/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://www.automicvault.com/ja/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/ja/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [pkgconf](https://www.automicvault.com/ja/pkg/brew/pkgconf/) - Build dependency declared by Homebrew. - [libtool](https://www.automicvault.com/ja/pkg/brew/libtool/) - Build dependency declared by Homebrew. - [autoconf](https://www.automicvault.com/ja/pkg/brew/autoconf/) - Build dependency declared by Homebrew. - [automake](https://www.automicvault.com/ja/pkg/brew/automake/) - Build dependency declared by Homebrew. - [fprobe](https://www.automicvault.com/ja/pkg/brew/fprobe/) - Shares av.db curated category or tags: cli, netflow, network-monitoring, networking, traffic-analysis. - [yaf](https://www.automicvault.com/ja/pkg/brew/yaf/) - Shares av.db curated category or tags: cli, network-monitoring, networking. - [cdpr](https://www.automicvault.com/ja/pkg/brew/cdpr/) - Shares av.db curated category or tags: cli, network-monitoring, networking. - [sniffnet](https://www.automicvault.com/ja/pkg/brew/sniffnet/) - Shares av.db curated category or tags: cli, network-monitoring, networking, traffic-analysis. - [ntopng](https://www.automicvault.com/ja/pkg/brew/ntopng/) - Shares av.db curated category or tags: cli, network-monitoring, networking, traffic-analysis. - [fastnetmon](https://www.automicvault.com/ja/pkg/brew/fastnetmon/) - Shares av.db curated category or tags: cli, netflow, network-monitoring, networking. - [sniffer](https://www.automicvault.com/ja/pkg/brew/sniffer/) - Shares av.db curated category or tags: cli, network-monitoring, networking, traffic-analysis. - [flow-tools](https://www.automicvault.com/ja/pkg/brew/flow-tools/) - Shares av.db curated category or tags: cli, netflow, networking, traffic-analysis. - [httpry](https://www.automicvault.com/ja/pkg/brew/httpry/) - Local metadata places this package in an adjacent workflow. Shared terms: analysis, cli, monitoring, network, network-monitoring. ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph