macOS
Homebrew已验证 · 100%
brew install nfdumplocal Homebrew formula metadata
MacPorts已验证 · 94%
sudo port install nfdumpMacPorts ports tree · net/nfdump/Portfile · 来源: api.github.com
安装
其他安装命令
Linux
Alpine Linux apk已验证 · 92%
sudo apk add nfdumpAlpine Linux edge package indexes · nfdump · 来源: dl-cdn.alpinelinux.org
Debian apt已验证 · 92%
sudo apt install nfdumpDebian stable package indexes · nfdump · 来源: deb.debian.org
Fedora dnf已验证 · 92%
sudo dnf install nfdumpFedora Rawhide package metadata · nfdump · 来源: dl.fedoraproject.org
Nix已验证 · 92%
nix profile install nixpkgs#nfdumpnixpkgs package indexes · pkgs/by-name/nf/nfdump/package.nix · 来源: api.github.com
openSUSE zypper已验证 · 92%
sudo zypper install nfdumpopenSUSE Tumbleweed package metadata · nfdump · 来源: download.opensuse.org
概览
软件包摘要
Tools to collect and process netflow data on the command-line
历史
项目历史与用法
nfdump is a long-lived command-line toolkit for collecting, storing, replaying, filtering, aggregating, and analyzing NetFlow, IPFIX, and sFlow data. The core workflow pairs collector daemons such as `nfcapd` and `sfcapd` with `nfdump` queries over rotated binary flow files.
项目历史
The legacy SourceForge page says the project moved to GitHub and describes the original design: collect flow data to disk first, organize it in timestamped files, then analyze historical or continuous traffic with a fast tcpdump-like filter language. FreshPorts records the FreeBSD port being added on 2004-11-07 with version 1.1 and NetFlow v5/v7 support; later documentation and packaging show support expanded to v9, IPFIX, and sFlow.
The GitHub README describes the 1.7.x series codename `unicorn`, compatibility with files created by nfdump 1.6.18 or newer, and conversion paths for older legacy flow files.
采用历史
nfdump is an infrastructure package rather than a trendy CLI. It appears across Homebrew, Debian, Ubuntu, Fedora, Alpine, Nix, MacPorts, and FreeBSD ports, and is tied historically to NfSen. The GitHub repository showed 1,405 commits when researched. Homebrew's API generated on 2026-07-01 reported 233 installs-on-request in the preceding 365 days.
使用方式
Practical users run `nfcapd` on UDP ports fed by routers, firewalls, or switches, rotate files every few minutes, and query them later with expressions such as `nfdump -r flowfile 'src ip 192.0.2.1 and dst port 443'`. The Debian nfcapd manpage says it accepts NetFlow v1, v5/v7, v9, and IPFIX transparently and works with exporters including Cisco Flexible NetFlow, ASA firewalls, NAT event logging, Juniper, VMware, Palo Alto, and yaf.
为什么软件包爱好者会关心
nfdump matters because it keeps the packet-capture mental model for flow records: small composable commands, tcpdump-like filters, files you can retain or expire, and text/CSV/JSON/custom output for shell pipelines and monitoring integrations.
时间线
- 2004-11-07: FreshPorts records the FreeBSD nfdump port being added.
- 2014-12-01: legacy SourceForge page listed 1.6.13 as the stable version and pointed users to GitHub.
- 2026-07-01: Homebrew formula API generated data for nfdump 1.7.8.
Related projects
- NfSen
- NetFlow
- IPFIX
- sFlow
- nfcapd
- sfcapd
- nfexpire
- nfreplay
来源
安全态势
风险级别：yellow
generalized runtime or code generation signal.
风险分类器
yellow 风险 · 中 置信度 · runtime
原因
- generalized runtime or code generation signal
信号
- text:repl
安装行为
- formula 元数据中未记录 Homebrew post-install 钩子。
- Homebrew bottle 元数据适用于 6 个平台目标。
- 构建元数据列出 4 个构建依赖。
建议审查
在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。
可执行文件
已安装的可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
geolookup | cli | 全局可执行文件 | |
nfanon | cli | 全局可执行文件 | |
nfcapd | cli | 全局可执行文件 | |
nfdump | cli | 全局可执行文件 | |
nfexpire | cli | 全局可执行文件 | |
nfreplay | cli | 全局可执行文件 | |
sfcapd | cli | 全局可执行文件 | |
torlookup | cli | 全局可执行文件 | |
updateGeoDB.sh | cli | 全局可执行文件 | |
updateTorDB.sh | cli | 全局可执行文件 |
新鲜度
版本和新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。
页面生成时间2026-07-25
管理器版本1.7.8
管理器更新时间2026-04-28
本地数据OK
上游当前
检测到的最新版本v1.7.8
https://github.com/phaag/nfdump
- OK没有生成新鲜度警告。
安装元数据
软件包元数据
| 软件包键 | brew:nfdump |
|---|---|
| 版本 | 1.7.8 |
| 软件包管理器 | Homebrew |
| 软件包管理器页面 | https://formulae.brew.sh/formula/nfdump |
| 主页 | https://github.com/phaag/nfdump |
| 仓库 | https://github.com/phaag/nfdump |
| 上游文档 | https://github.com/phaag/nfdump#readme |
| 许可证 | BSD-3-Clause |
| 源码归档 | https://github.com/phaag/nfdump/archive/refs/tags/v1.7.8.tar.gz |
| 最后更新 | 2026-04-28T13:34:16Z |
| Pulse | updated |
| 构建依赖 | autoconf, automake, libtool, pkgconf |
| macOS 提供的库 | bzip2, libpcap |
| Bottle | 可用 (于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | 未定义 |
| 服务 | 未声明 |
注册表事实
源数据库详情
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | nfdump |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
源数据库匹配
其他软件包管理器记录
匹配项来自外部软件包管理器索引，并与本地 Automic Vault 软件包链接分开显示。
Debian apt95%
nfdump 1.7.5-2+deb13u1
netflow capture daemon
https://github.com/phaag/nfdump/
sudo apt install nfdump- Section: net
- Architecture: amd64
- 6 依赖
- normalized package name match
- 匹配方式：Nfdump
Debian apt95%
nfdump-sflow 1.7.5-2+deb13u1
sflow collector daemon
https://github.com/phaag/nfdump/
sudo apt install nfdump-sflow- Section: net
- Architecture: amd64
- Source Package: nfdump
- 5 依赖
- normalized package name match
- 匹配方式：Nfdump
Nix95%
nfdump
nix profile install nixpkgs#nfdump- normalized package name match
- 匹配方式：Nfdump
Ubuntu apt95%
nfdump 1.7.3-1build2
netflow capture daemon
https://github.com/phaag/nfdump/
sudo apt install nfdump- Section: universe/net
- Architecture: amd64
- 5 依赖
- normalized package name match
- 匹配方式：Nfdump
Ubuntu apt95%
nfdump-sflow 1.7.3-1build2
sflow collector daemon
https://github.com/phaag/nfdump/
sudo apt install nfdump-sflow- Section: universe/net
- Architecture: amd64
- Source Package: nfdump
- 3 依赖
- normalized package name match
- 匹配方式：Nfdump
apk95%
nfdump 1.7.6-r1
Tools to collect and process netflow data
https://github.com/phaag/nfdump
sudo apk add nfdump- License: BSD-3-Clause
- Architecture: x86_64
- Source Package: nfdump
- 1 依赖
- 1 提供
- normalized package name match
- 匹配方式：Nfdump
apk95%
nfdump-dbg 1.7.6-r1
Tools to collect and process netflow data (debug symbols)
https://github.com/phaag/nfdump
sudo apk add nfdump-dbg- License: BSD-3-Clause
- Architecture: x86_64
- Source Package: nfdump
- 1 依赖
- normalized package name match
- 匹配方式：Nfdump
apk95%
nfdump-doc 1.7.6-r1
Tools to collect and process netflow data (documentation)
https://github.com/phaag/nfdump
sudo apk add nfdump-doc- License: BSD-3-Clause
- Architecture: x86_64
- Source Package: nfdump
- normalized package name match
- 匹配方式：Nfdump
apk95%
nfdump-openrc 1.7.6-r1
Tools to collect and process netflow data (OpenRC init scripts)
https://github.com/phaag/nfdump
sudo apk add nfdump-openrc- License: BSD-3-Clause
- Architecture: x86_64
- Source Package: nfdump
- normalized package name match
- 匹配方式：Nfdump
apk95%
nfdump-static 1.7.6-r1
Tools to collect and process netflow data (static library)
https://github.com/phaag/nfdump
sudo apk add nfdump-static- License: BSD-3-Clause
- Architecture: x86_64
- Source Package: nfdump
- normalized package name match
- 匹配方式：Nfdump
apk95%
nfprofile 1.7.6-r1
Create views of the data with NFdump filters
https://github.com/phaag/nfdump
sudo apk add nfprofile- License: BSD-3-Clause
- Architecture: x86_64
- Source Package: nfdump
- 1 依赖
- 1 提供
- normalized package name match
- 匹配方式：Nfdump
apk95%
sfcapd 1.7.6-r1
sFlow collector
https://github.com/phaag/nfdump
sudo apk add sfcapd- License: BSD-3-Clause
- Architecture: x86_64
- Source Package: nfdump
- 1 依赖
- 1 提供
- normalized package name match
- 匹配方式：Nfdump
apk95%
sfcapd-openrc 1.7.6-r1
Tools to collect and process netflow data (OpenRC init scripts)
https://github.com/phaag/nfdump
sudo apk add sfcapd-openrc- License: BSD-3-Clause
- Architecture: x86_64
- Source Package: nfdump
- normalized package name match
- 匹配方式：Nfdump
dnf95%
nfdump 1.7.8-1.fc45
NetFlow collecting and processing tools
https://github.com/phaag/nfdump
sudo dnf install nfdump- License: BSD-3-Clause AND GPL-2.0-or-later
- Category: Unspecified
- Architecture: x86_64
- Source Package: nfdump
- 8 依赖
- 1 提供
- normalized package name match
- 匹配方式：Nfdump
dnf95%
nfdump-libs 1.7.8-1.fc45
Libraries used by NFDUMP packages
https://github.com/phaag/nfdump
sudo dnf install nfdump-libs- License: BSD-3-Clause AND GPL-2.0-or-later
- Category: Unspecified
- Architecture: x86_64
- Source Package: nfdump
- 4 依赖
- 3 提供
- normalized package name match
- 匹配方式：Nfdump
zypper95%
libnfdump-1_7_8 1.7.8-1.1
Shared Library part of libnfdump
https://github.com/phaag/nfdump
sudo zypper install libnfdump-1_7_8- License: BSD-3-Clause
- Category: System/Libraries
- Architecture: x86_64
- Source Package: nfdump
- 2 依赖
- 2 提供
- normalized package name match
- 匹配方式：Nfdump
来源线索
由仓库数据生成
此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。
Combined YAML source
View the package source record on GitHub.
使用的来源
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment