Skip to content

Glossary: Security Monitoring and Automation

nfdump

A command that reads stored flow files and answers questions about them. `-R` reads a folder, `-o "fmt:..."` picks the columns, and a filter such as `'bytes > 1000000'` keeps only matching flows.

Where the book teaches it

Related terms

nfcapdflow record