NetFlow provides deep network visibility by summarizing traffic into metadata, such as source and destination IPs, ports, and protocols, without the storage burden of full packet captures. For open-source enthusiasts, it offers a way to monitor "who is talking to whom" at scale using free, community-driven tools. 🛠️ The Open Source Stack
: A lightweight, high-performance probe that converts raw traffic into NetFlow or IPFIX records. opensource netflow
| Tool | Strengths | |------|------------| | | Blazing fast CLI; pairs with nfsen for a web GUI. Classic, stable. | | pmacct | Super flexible: can write to MySQL, PostgreSQL, Kafka, or flat files. Mimics NetFlow, sFlow, IPFIX. | | ElastiFlow | Integrates NetFlow with Elasticsearch, Logstash, Kibana (ELK). Great for large-scale dashboards. | | GoFlow | Modern, high-performance NetFlow/IPFIX collector written in Go. Excellent as a Kafka producer. | | Tool | Strengths | |------|------------| | |