📊

NetFlow Traffic Analysis

Simple

Free preview · 2 of 5 steps

NetFlow: accountability for every conversation

A flow is a sequence of packets between the same source and destination (same 5-tuple: src IP, dst IP, src port, dst port, protocol). NetFlow tracks every active flow in the router's cache — counting bytes and packets.

When a flow ends (TCP FIN, or timeout), the router exports a summary record to a collector. This gives you historical accounting: who talked to whom, how much data, when.

Packets in motion — click to inspect:

1 / 2

Space to play/pause · ← → to step