1
2NFANON(1)                 BSD General Commands Manual                NFANON(1)
3

NAME

5     nfanon — anonymize the IP adresses
6

SYNOPSIS

8     nfanon -r path [-w nffile] -K key [-q] [-h]
9

DESCRIPTION

11     nfanon anonimizes all IP adresses ( src, dst, next hop, router IP etc. )
12     in the netflow records using the CryptoPAn (Cryptography-based  Prefix-
13     preserving Anonymization) module. The key -K is used to initialize the
14     Rijndael cipher. The key is either a 32 character string, or a 64 hex
15     digit string starting with 0x. See https://en.wikipedia.org/wiki/Crypto-
16     PAn for more information on CryptoPAn.
17
18     The source specified by argument -r path may point to a single nfdump
19     file or to a directory containing many nfdump files.  All files in a di‐
20     rectory are processed recursively.
21
22     If the output argument -w nffile is given, all anonimized records are
23     written into that single file, even if the source is a directory. If no
24     argument -w is specified, nfanon overwrites the original source file with
25     the anonymized flow records.  If the source is a directory, each flow
26     file is anonymized respectively.
27
28     The options are as follows:
29
30     -r path
31             Path to read flow files to anonymize. Path may point to a single
32             file or a directory containing many flow files.
33
34     [-w nffile]
35             File name to write anonymized flow records to. If this argument
36             is missing, the source file name is taken, which means the origi‐
37             nal file is overwritten.
38
39     -k key  key is either a 32 character string, or a 64 char hex string
40             starting with 0x. This key is used to initialize the anonymizer.
41
42     -q      nfanon prints the file name to be processed and an actifivy spin‐
43             ner. This option disables both.
44
45     -h      Print help text to stdout and exit.
46

EXAMPLES

48     To create a random 64 character hex string you may use the following com‐
49     mand:
50           % xxd -u -l 32 -p -c 64 /dev/urandom
51     Use the resulting output as key, prepended with 0x as -K argument.
52

RETURN VALUES

54     nfanon returns 0 on success and 255 otherwise.
55

SEE ALSO

57     nfdump(1)
58
59BSD                            February 6, 2023                            BSD
Impressum