phaag

Keybase proof

I hereby claim:

• I am phaag on github.
• I am ultrix (https://keybase.io/ultrix) on keybase.
• I have a public key ASB3MPstoKM89MdDV8PZpC_B0VJ-2y5xSAovgk14q0wZZQo

To claim this, I am signing this object:

phaag

nfdump 1.8.x Filter Syntax Cheatsheet

This reference is derived from the 1.8.x filter grammar. Filters are supplied as the final nfdump argument or read from a file with -f filterfile.

nfdump -r flows 'proto tcp and dst port 443'
nfdump -r flows -f incident.filter