# Install fprobe with Homebrew, apk, apt, MacPorts Libpcap-based NetFlow probe. Version 1.1 via Homebrew; verified from local package data. ## Install ```sh sudo av install brew:fprobe ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install fprobe ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install fprobe ``` Evidence: MacPorts ports tree: net/fprobe/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add fprobe ``` Evidence: Alpine Linux edge package indexes: fprobe from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install fprobe ``` Evidence: Debian stable package indexes: fprobe from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz ## Package facts - **Package key:** brew:fprobe - **Package manager:** Homebrew - **Package manager page:** - **Version:** 1.1 - **Source summary:** Libpcap-based NetFlow probe - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** GPL-2.0-only - **Source archive:** - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - fprobe (cli) - fprobe (alias) ## Uses from macOS - libpcap ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_big_sur, arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, big_sur, catalina, monterey, sonoma, ventura ## Freshness - Page generated: 2026-07-08 - Package-manager version: 1.1 - Local data: ok - Upstream repository: https://sourceforge.net/projects/fprobe/ - info: No package-manager update timestamp was available. - info: Release/tag comparison is only available for GitHub repositories. ## Project history and usage fprobe is a libpcap-based NetFlow probe. Its official homepage and README describe a tool that collects network traffic data and emits it as NetFlow records to a configured collector. ### Project history The SourceForge project was registered on 2002-09-27. The ChangeLog in the official 1.1 source archive records fprobe 0.8 on 2002-10-25 as the first public release, with partial NetFlow 1, 5, and 7 support and builds tested on Linux, FreeBSD, and Solaris on x86. The 2002 and 2003 releases moved quickly toward production daemon behavior: performance-oriented rewrites, larger hash tables, memory controls, realtime scheduling, SNMP interface index workarounds, TCP flags, daemonization, syslog logging, pidfiles, tcpdump file input, multiple collectors, and manpage updates. Version 1.1 in 2005 included bug fixes, feature enhancement, and a default hash change related to algorithmic-complexity DoS hardening. ### Adoption history The official SourceForge project remains the download and file-release surface, with release archives from 2002 through 2005 and a project page listing ongoing downloads. Its homepage pairs fprobe with fprobe-ulog, a Linux-only libipulog fork for iptables ULOG packet capture. ### How it is used fprobe runs as a system-oriented command that captures from a libpcap interface or from tcpdump -w data on stdin, applies an optional tcpdump-style filter, tracks flows, and sends NetFlow to one or more remote collectors. Its man page documents interface selection, filters, timers, NetFlow version selection, source address, queue and memory limits, realtime priority, chroot/user options, and collector syntax. ### Why package nerds care fprobe is a compact example of early-2000s Unix network-monitoring packaging: a small C daemon, libpcap dependency, man page, init-script contribution, and SourceForge tarball releases. It matters historically as a bridge between packet capture tools and NetFlow collectors before flow export was routine in commodity monitoring stacks. ### Timeline - 2002: SourceForge project registered. - 2002: fprobe 0.8 first public release. - 2002: fprobe 0.90 focused on performance improvements. - 2003: fprobe 1.0 was released with changed filter behavior, option -K, and manpage updates. - 2004: fprobe 1.0.5 changed the default tool location to /usr/sbin and moved the man page to section 8. - 2005: fprobe 1.1 was released with bug fixes, feature enhancement, and default hash hardening. ### Related projects - The homepage describes fprobe-ulog as a libipulog-based fork for Linux netfilter ULOG capture. The README also points to nProbe, a namesake fprobe project by Bogdan Surdu, Softflowd, Cisco NetFlow resources, and network-monitoring link collections. ### Sources - - - - ## Security Notes narrow executable package without higher-risk signals. - **Geiger risk:** green / low - narrow executable package without higher-risk signals ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** fprobe - **Version Scheme:** 0 - **Revision:** 0 - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** stable ## Other Package-Manager Records - Debian apt - fprobe - 1.1-8+b1: normalized package name match | Debian stable package indexes: fprobe from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | export captured traffic to remote NetFlow Collector | http://fprobe.sourceforge.net - Ubuntu apt - fprobe - 1.1-8build2: normalized package name match | Ubuntu 24.04 LTS package indexes: fprobe from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | export captured traffic to remote NetFlow Collector | http://fprobe.sourceforge.net - apk - fprobe - 1.1-r13: normalized package name match | Alpine Linux edge package indexes: fprobe from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | libpcap-based tool that collect network traffic | https://fprobe.sourceforge.net/ - apk - fprobe-doc - 1.1-r13: normalized package name match | Alpine Linux edge package indexes: fprobe-doc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | libpcap-based tool that collect network traffic (documentation) | https://fprobe.sourceforge.net/ - apk - fprobe-openrc - 1.1-r13: normalized package name match | Alpine Linux edge package indexes: fprobe-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | libpcap-based tool that collect network traffic (OpenRC init scripts) | https://fprobe.sourceforge.net/ - MacPorts - fprobe: normalized package name match | MacPorts ports tree: net/fprobe/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ## Related links - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Homebrew utility packages](https://www.automicvault.com/pkg/brew-utility-packages/) - Matched Homebrew package provider. - [flow-tools](https://www.automicvault.com/pkg/brew/flow-tools/) - Shares av.db curated category or tags: cli, netflow, networking, traffic-analysis. - [ntopng](https://www.automicvault.com/pkg/brew/ntopng/) - Shares av.db curated category or tags: cli, monitoring, network-monitoring, networking, traffic-analysis. - [sniffer](https://www.automicvault.com/pkg/brew/sniffer/) - Shares av.db curated category or tags: cli, monitoring, network-monitoring, networking, traffic-analysis. - [sniffnet](https://www.automicvault.com/pkg/brew/sniffnet/) - Shares av.db curated category or tags: cli, monitoring, network-monitoring, networking, traffic-analysis. - [bmon](https://www.automicvault.com/pkg/brew/bmon/) - Shares av.db curated category or tags: cli, monitoring, network-monitoring, networking. - [bwm-ng](https://www.automicvault.com/pkg/brew/bwm-ng/) - Shares av.db curated category or tags: cli, monitoring, network-monitoring, networking. - [darkstat](https://www.automicvault.com/pkg/brew/darkstat/) - Shares av.db curated category or tags: cli, monitoring, networking, traffic-analysis. - [dnstop](https://www.automicvault.com/pkg/brew/dnstop/) - Shares av.db curated category or tags: cli, monitoring, networking, traffic-analysis. - [jnettop](https://www.automicvault.com/pkg/brew/jnettop/) - Local metadata places this package in an adjacent workflow. Shared terms: cli, monitoring, network, network-monitoring, networking. - [yconalyzer](https://www.automicvault.com/pkg/brew/yconalyzer/) - Local metadata places this package in an adjacent workflow. Shared terms: analysis, cli, libpcap, monitoring, network. - [iperf](https://www.automicvault.com/pkg/brew/iperf/) - Local package facts share a topical domain. Shared terms: cli, networking. ## Combined YAML source View the package source record on GitHub. [combined/fprobe.yml](https://github.com/automic-vault/db/blob/main/combined/fprobe.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph