phaag

nfdump 1.8.x Filter Syntax Cheatsheet

This reference is derived from the 1.8.x filter grammar. Filters are supplied as the final nfdump argument or read from a file with -f filterfile.

nfdump -r flows 'proto tcp and dst port 443'
nfdump -r flows -f incident.filter