nProbe includes both a NetFlow v5/v9/IPFIX probe and collector that can be used to play with NetFlow flows.To collect and export NetFlow flows generated by border gateways/switches/routers or any other device that can export in NetFlow v5/v9.As a drop-in replacement of embedded, low-speed, NetFlow probes that may already been deployed.

To analyze multi-Gbit networks at full speed with no (or very moderate) packet loss.To send monitored flows towards a collector such as the open-source ntopng or a commercial one (e.g.

Layer-7 application visibility (250+ applications including Skype, BitTorrent and Citrix).Available for Linux, FreeBSD (including OPNsense and pfSense) Windows, and embedded environments ARM and MIPS/MIPSEL.Cisco NetFlow Collector or Plixer)Ĭurrently nProbe™ is a software application available stand-alone or as an embedded system named nBox.

Native support for technologies PF_RING and the newest kernel-bypass PF_RING Zero Copy (ZC) for ultra-high speed packet capture.Ability to dump flows in format ready for import in columnar databases.Ability to natively export flows to Kafka and ElasticSearch (using the Export Plugin).Ability to natively export flows to Apache™, Syslog, MySQL/MariaDB, Splunk (via TCP streaming).Limited memory footprint (less that 2 MB of memory regardless of the network size) and CPU savvy.Full IPFIX support: PEN (Private Enterprise Numbers) and Variable length encoding.IPS Mode: ability to block and shape traffic using nDPI.NetFlow v5/v9/IPFIX support for efficient flow handling.Layer-7 application propagation in exported flows to enable accurate accounting.

Best netflow analyzer