Skip to content

Glossary: Logs and Data Sources for Investigations

nfdump

A tool that reads and filters stored flow records. Alex used it to list flows from the shop server to port 8080.

Where the book teaches it

Related terms

nfcapdFlow recordAnalyzer