Netflow

Definition

NetFlow is a network protocol that collects IP network traffic data entering or leaving an interface. Cisco Systems Inc. developed (and still owns) the original NetFlow protocol. However, the name is now used as a general term for all flow records and datagrams.

As a result, NetFlow derivatives and variants usually adhere to the ‘xFlow’ naming pattern. NetFlow gathers data such as the source and destination IP address, transferred packets and bytes, the source and destination port, and the timing of the transmission.

Netflow Variants

• IP Flow Information Export (IPFIX): Also known as ‘NetFlow’, IPFIX is a standard flow record format that provides a more universal approach to analyzing network data flow.
• sFlow: This is a data record and flow protocol developed by InMon Corp. It uses statistical sampling techniques for flow documentation, reducing the amount of information processed.