# 使用 Homebrew, apk, apt, dnf, MacPorts, Nix, zypper 安装 nfdump 查看 nfdump 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。 ## 安装 ```sh sudo av install brew:nfdump ``` 其他安装命令: ### macOS - Homebrew (100%): ```sh brew install nfdump ``` 证据: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install nfdump ``` 证据: MacPorts ports tree: net/nfdump/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add nfdump ``` 证据: Alpine Linux edge package indexes: nfdump from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install nfdump ``` 证据: Debian stable package indexes: nfdump from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install nfdump ``` 证据: Fedora Rawhide package metadata: nfdump from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/210a2053c8e007daf9ae39c2a21daaed9b2ddd07d63ecffa597050361e73650c-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#nfdump ``` 证据: nixpkgs package indexes: pkgs/by-name/nf/nfdump/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - zypper (92%): ```sh sudo zypper install nfdump ``` 证据: openSUSE Tumbleweed package metadata: nfdump from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst ## 软件包事实 - **软件包键:** brew:nfdump - **软件包管理器:** Homebrew - **软件包管理器页面:** - **版本:** 1.7.8 - **来源摘要:** Tools to collect and process netflow data on the command-line - **主页:** - **仓库:** - **许可证:** BSD-3-Clause - **源码归档:** - **已生成:** 2026-08-04T22:13:35+00:00 ## 可执行文件 - geolookup (cli) - nfanon (cli) - nfcapd (cli) - nfdump (cli) - nfexpire (cli) - nfreplay (cli) - sfcapd (cli) - torlookup (cli) - updateGeoDB.sh (cli) - updateTorDB.sh (cli) - geolookup (别名) - nfanon (别名) - nfcapd (别名) - nfdump (别名) - nfexpire (别名) - nfreplay (别名) - sfcapd (别名) - torlookup (别名) - updateGeoDB.sh (别名) - updateTorDB.sh (别名) ## 构建依赖 - autoconf - automake - libtool - pkgconf ## macOS 提供的库 - bzip2 - libpcap ## 安装行为 - post-install 钩子: 未定义 - Bottle: 可用 于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## 版本和新鲜度 - 页面生成时间: 2026-08-04 - 管理器版本: 1.7.8 - 本地数据: OK - 上游仓库: https://github.com/phaag/nfdump - 检测到的最新版本: v1.7.8 (当前) - 信息: No package-manager update timestamp was available. ## 项目历史与用法 nfdump is a long-lived command-line toolkit for collecting, storing, replaying, filtering, aggregating, and analyzing NetFlow, IPFIX, and sFlow data. The core workflow pairs collector daemons such as `nfcapd` and `sfcapd` with `nfdump` queries over rotated binary flow files. ### 项目历史 The legacy SourceForge page says the project moved to GitHub and describes the original design: collect flow data to disk first, organize it in timestamped files, then analyze historical or continuous traffic with a fast tcpdump-like filter language. FreshPorts records the FreeBSD port being added on 2004-11-07 with version 1.1 and NetFlow v5/v7 support; later documentation and packaging show support expanded to v9, IPFIX, and sFlow. The GitHub README describes the 1.7.x series codename `unicorn`, compatibility with files created by nfdump 1.6.18 or newer, and conversion paths for older legacy flow files. ### 采用历史 nfdump is an infrastructure package rather than a trendy CLI. It appears across Homebrew, Debian, Ubuntu, Fedora, Alpine, Nix, MacPorts, and FreeBSD ports, and is tied historically to NfSen. The GitHub repository showed 1,405 commits when researched. Homebrew's API generated on 2026-07-01 reported 233 installs-on-request in the preceding 365 days. ### 使用方式 Practical users run `nfcapd` on UDP ports fed by routers, firewalls, or switches, rotate files every few minutes, and query them later with expressions such as `nfdump -r flowfile 'src ip 192.0.2.1 and dst port 443'`. The Debian nfcapd manpage says it accepts NetFlow v1, v5/v7, v9, and IPFIX transparently and works with exporters including Cisco Flexible NetFlow, ASA firewalls, NAT event logging, Juniper, VMware, Palo Alto, and yaf. ### 为什么软件包爱好者会关心 nfdump matters because it keeps the packet-capture mental model for flow records: small composable commands, tcpdump-like filters, files you can retain or expire, and text/CSV/JSON/custom output for shell pipelines and monitoring integrations. ### 时间线 - 2004-11-07: FreshPorts records the FreeBSD nfdump port being added. - 2014-12-01: legacy SourceForge page listed 1.6.13 as the stable version and pointed users to GitHub. - 2026-07-01: Homebrew formula API generated data for nfdump 1.7.8. ### Related projects - NfSen - NetFlow - IPFIX - sFlow - nfcapd - sfcapd - nfexpire - nfreplay ### 来源 - - - - - ## 安全说明 generalized runtime or code generation signal. - **Geiger 风险:** yellow / 中 - generalized runtime or code generation signal ## 源数据库详情 - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** nfdump - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## 其他软件包管理器记录 - Debian apt - nfdump - 1.7.5-2+deb13u1: normalized package name match | Debian stable package indexes: nfdump from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | netflow capture daemon | https://github.com/phaag/nfdump/ - Debian apt - nfdump-sflow - 1.7.5-2+deb13u1: normalized package name match | Debian stable package indexes: nfdump-sflow from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | sflow collector daemon | https://github.com/phaag/nfdump/ - Nix - nfdump: normalized package name match | nixpkgs package indexes: pkgs/by-name/nf/nfdump/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - nfdump - 1.7.3-1build2: normalized package name match | Ubuntu 24.04 LTS package indexes: nfdump from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | netflow capture daemon | https://github.com/phaag/nfdump/ - Ubuntu apt - nfdump-sflow - 1.7.3-1build2: normalized package name match | Ubuntu 24.04 LTS package indexes: nfdump-sflow from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | sflow collector daemon | https://github.com/phaag/nfdump/ - apk - nfdump - 1.7.6-r1: normalized package name match | Alpine Linux edge package indexes: nfdump from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Tools to collect and process netflow data | https://github.com/phaag/nfdump - apk - nfdump-dbg - 1.7.6-r1: normalized package name match | Alpine Linux edge package indexes: nfdump-dbg from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Tools to collect and process netflow data (debug symbols) | https://github.com/phaag/nfdump - apk - nfdump-doc - 1.7.6-r1: normalized package name match | Alpine Linux edge package indexes: nfdump-doc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Tools to collect and process netflow data (documentation) | https://github.com/phaag/nfdump - apk - nfdump-openrc - 1.7.6-r1: normalized package name match | Alpine Linux edge package indexes: nfdump-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Tools to collect and process netflow data (OpenRC init scripts) | https://github.com/phaag/nfdump - apk - nfdump-static - 1.7.6-r1: normalized package name match | Alpine Linux edge package indexes: nfdump-static from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Tools to collect and process netflow data (static library) | https://github.com/phaag/nfdump - apk - nfprofile - 1.7.6-r1: normalized package name match | Alpine Linux edge package indexes: nfprofile from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Create views of the data with NFdump filters | https://github.com/phaag/nfdump - apk - sfcapd - 1.7.6-r1: normalized package name match | Alpine Linux edge package indexes: sfcapd from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | sFlow collector | https://github.com/phaag/nfdump - apk - sfcapd-openrc - 1.7.6-r1: normalized package name match | Alpine Linux edge package indexes: sfcapd-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Tools to collect and process netflow data (OpenRC init scripts) | https://github.com/phaag/nfdump - dnf - nfdump - 1.7.8-2.fc45: normalized package name match | Fedora Rawhide package metadata: nfdump from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/210a2053c8e007daf9ae39c2a21daaed9b2ddd07d63ecffa597050361e73650c-primary.xml.zst | NetFlow collecting and processing tools | https://github.com/phaag/nfdump - dnf - nfdump-libs - 1.7.8-2.fc45: normalized package name match | Fedora Rawhide package metadata: nfdump-libs from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/210a2053c8e007daf9ae39c2a21daaed9b2ddd07d63ecffa597050361e73650c-primary.xml.zst | Libraries used by NFDUMP packages | https://github.com/phaag/nfdump - zypper - libnfdump-1_7_8 - 1.7.8-1.3: normalized package name match | openSUSE Tumbleweed package metadata: libnfdump-1_7_8 from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Shared Library part of libnfdump | https://github.com/phaag/nfdump ## 相关链接 - [Source-control packages](https://pkg.so/zh-hans/source-control-tools/) - Belongs to a source-control command family. - [Secret-risk packages](https://pkg.so/zh-hans/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://pkg.so/zh-hans/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://pkg.so/zh-hans/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [pkgconf](https://pkg.so/zh-hans/brew/pkgconf/) - Build dependency declared by Homebrew. - [libtool](https://pkg.so/zh-hans/brew/libtool/) - Build dependency declared by Homebrew. - [autoconf](https://pkg.so/zh-hans/brew/autoconf/) - Build dependency declared by Homebrew. - [automake](https://pkg.so/zh-hans/brew/automake/) - Build dependency declared by Homebrew. - [fprobe](https://pkg.so/zh-hans/brew/fprobe/) - Shares pkgdb curated category or tags: cli, netflow, network-monitoring, networking, traffic-analysis. - [cdpr](https://pkg.so/zh-hans/brew/cdpr/) - Shares pkgdb curated category or tags: cli, network-monitoring, networking. - [sniffnet](https://pkg.so/zh-hans/brew/sniffnet/) - Shares pkgdb curated category or tags: cli, network-monitoring, networking, traffic-analysis. - [ntopng](https://pkg.so/zh-hans/brew/ntopng/) - Shares pkgdb curated category or tags: cli, network-monitoring, networking, traffic-analysis. - [fastnetmon](https://pkg.so/zh-hans/brew/fastnetmon/) - Shares pkgdb curated category or tags: cli, netflow, network-monitoring, networking. - [argus-clients](https://pkg.so/zh-hans/brew/argus-clients/) - Shares pkgdb curated category or tags: cli, network-monitoring, networking, traffic-analysis. - [sniffer](https://pkg.so/zh-hans/brew/sniffer/) - Shares pkgdb curated category or tags: cli, network-monitoring, networking, traffic-analysis. - [flow-tools](https://pkg.so/zh-hans/brew/flow-tools/) - Shares pkgdb curated category or tags: cli, netflow, networking, traffic-analysis. - [httpry](https://pkg.so/zh-hans/brew/httpry/) - Local metadata places this package in an adjacent workflow. Shared terms: cli, monitoring, network, network-monitoring, networking. ## Combined YAML source View the package source record on GitHub. [combined/nfdump.yml](https://github.com/mxcl/pkgdb/blob/main/combined/nfdump.yml) ## 来源 - pkg.so package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph