Linux

How to get netflow from a pcap file

Use nfdump suite. First transform pcap into nfcapd-format. For that: In case you have many pcap files, you can use a bash loop: Mind the extra p in nfPcapd and