How To Install nfdump on CentOS 8
Introduction
In this tutorial we learn how to install nfdump on CentOS 8.
What is nfdump
Nfdump is a set of tools to collect and process NetFlow data. It’s fast and has a powerful filter pcap like syntax. It supports NetFlow versions v1, v5, v7, v9 and IPFIX as well as a limited set of sflow. It includes support for CISCO ASA (NSEL) and CISCO NAT (NEL) devices which export event logging records as v9 flows. Nfdump is fully IPv6 compatible.
We can use yum or dnf to install nfdump on CentOS 8. In this tutorial we discuss both methods but you only need to choose one of method to install nfdump.
Install nfdump on CentOS 8 Using dnf
Update yum database with dnf using the following command.
sudo dnf makecache --refresh
The output should look something like this:
CentOS Linux 8 - AppStream 43 kB/s | 4.3 kB 00:00
CentOS Linux 8 - BaseOS 65 kB/s | 3.9 kB 00:00
CentOS Linux 8 - ContinuousRelease 43 kB/s | 3.0 kB 00:00
CentOS Linux 8 - Extras 23 kB/s | 1.5 kB 00:00
CentOS Linux 8 - FastTrack 40 kB/s | 3.0 kB 00:00
CentOS Linux 8 - HighAvailability 36 kB/s | 3.9 kB 00:00
CentOS Linux 8 - Plus 24 kB/s | 1.5 kB 00:00
CentOS Linux 8 - PowerTools 50 kB/s | 4.3 kB 00:00
Extra Packages for Enterprise Linux Modular 8 - x86_64 13 kB/s | 9.2 kB 00:00
Extra Packages for Enterprise Linux 8 - x86_64 24 kB/s | 8.5 kB 00:00
Metadata cache created.
After updating yum database, We can install nfdump using dnf by running the following command:
sudo dnf -y install nfdump
Install nfdump on CentOS 8 Using yum
Update yum database with yum using the following command.
sudo yum makecache --refresh
The output should look something like this:
CentOS Linux 8 - AppStream 43 kB/s | 4.3 kB 00:00
CentOS Linux 8 - BaseOS 65 kB/s | 3.9 kB 00:00
CentOS Linux 8 - ContinuousRelease 43 kB/s | 3.0 kB 00:00
CentOS Linux 8 - Extras 23 kB/s | 1.5 kB 00:00
CentOS Linux 8 - FastTrack 40 kB/s | 3.0 kB 00:00
CentOS Linux 8 - HighAvailability 36 kB/s | 3.9 kB 00:00
CentOS Linux 8 - Plus 24 kB/s | 1.5 kB 00:00
CentOS Linux 8 - PowerTools 50 kB/s | 4.3 kB 00:00
Extra Packages for Enterprise Linux Modular 8 - x86_64 13 kB/s | 9.2 kB 00:00
Extra Packages for Enterprise Linux 8 - x86_64 24 kB/s | 8.5 kB 00:00
Metadata cache created.
After updating yum database, We can install nfdump using yum by running the following command:
sudo yum -y install nfdump
How To Uninstall nfdump on CentOS 8
To uninstall only the nfdump package we can use the following command:
sudo dnf remove nfdump
nfdump Package Contents on CentOS 8
/usr/bin/nfanon
/usr/bin/nfcapd
/usr/bin/nfdump
/usr/bin/nfexpire
/usr/bin/nfpcapd
/usr/bin/nfprofile
/usr/bin/nfreplay
/usr/bin/nftrack
/usr/bin/sfcapd
/usr/lib/.build-id
/usr/lib/.build-id/1c
/usr/lib/.build-id/1c/95cbafa3084785d52d12c5e6e84225993a1b1c
/usr/lib/.build-id/55
/usr/lib/.build-id/55/094801d34a75a863589146f54ce4045d7d1843
/usr/lib/.build-id/73
/usr/lib/.build-id/73/f3876923a1d2eb9a7fb06ed9781ddc7c78fc38
/usr/lib/.build-id/8c
/usr/lib/.build-id/8c/c4dfe8e832a2b4b94230c2c697f26c67850c87
/usr/lib/.build-id/92
/usr/lib/.build-id/92/ffeba273607a6a7983a2520ab20cc3b1f711f5
/usr/lib/.build-id/9f
/usr/lib/.build-id/9f/1e79945a55dd7e6a6b09100b4ad448aa9b79bd
/usr/lib/.build-id/ac
/usr/lib/.build-id/ac/fae5e06f234c877b34df91b6677272c6bf80c8
/usr/lib/.build-id/d2
/usr/lib/.build-id/d2/34429d674e363a75266f4493a13ba3319b646d
/usr/lib/.build-id/de
/usr/lib/.build-id/de/2752a5a6f5cdd3d8553577e079acdd8018ded6
/usr/share/doc/nfdump
/usr/share/doc/nfdump/AUTHORS
/usr/share/doc/nfdump/ChangeLog
/usr/share/doc/nfdump/README.md
/usr/share/licenses/nfdump
/usr/share/licenses/nfdump/LICENSE
/usr/share/man/man1/ft2nfdump.1.gz
/usr/share/man/man1/nfanon.1.gz
/usr/share/man/man1/nfcapd.1.gz
/usr/share/man/man1/nfdump.1.gz
/usr/share/man/man1/nfexpire.1.gz
/usr/share/man/man1/nfprofile.1.gz
/usr/share/man/man1/nfreplay.1.gz
/usr/share/man/man1/sfcapd.1.gz
References
Summary
In this tutorial we learn how to install nfdump on CentOS 8 using yum and dnf.