tcpdump -nni enp3s2 -s 0 -w dump -c 1000000
nfcapd -p9995 -l ./netflow/
softflowd -n 127.0.0.1:9995 -r dump
nfdump -M netflow/ -R 201611171535:201611171535 -o “fmt:%ts, %sa, %sp, %da, %dp, %byt, %pkt, %out, %pr” -q -N