OpenBSD ports

The net/nfdump port

nfdump-1.7.5 – tools to collect and process netflow data

Description

The nfdump tools collect and process netflow data (v5, v7 and v9)
on the command line. They are part of the NfSen project.

nfcapd - netflow capture daemon.  Reads the netflow data from the
network and stores the data into files. Automatically rotate files
every n minutes (typically every 5 minutes). nfcapd reads netflow v5,
v7 and v9 flows transparently. You need one nfcapd process for each
netflow stream.

nfdump - netflow dump.  Reads the netflow data from the files stored
by nfcapd. Its syntax is similar to tcpdump. If you like tcpdump
you will like nfdump. Displays netflow data and can create lots of
top N statistics of flows IP addresses, ports etc in whichever
order you like.

nfreplay - netflow replay.  Reads the netflow data from the files
stored by nfcapd and sends it over the network to another host.

A web front-end, NfSen, is available at http://nfsen.sourceforge.net/

WWW: https://github.com/phaag/nfdump
Multi-packages
nfdump-1.7.5 nfprofile-1.7.5
Only for arches
aarch64 aarch64 alpha amd64 amd64 arm arm hppa i386 i386 mips64 mips64 mips64el mips64el powerpc powerpc powerpc64 powerpc64 riscv64 riscv64 sparc64
Categories:
net

Library dependencies

Build dependencies

Run dependencies