Alternatives to GoFlow2
A NetFlow, IPFIX and sFlow collector written in Go that normalises flow data into one format. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
GoFlow2
A NetFlow, IPFIX and sFlow collector written in Go that normalises flow data into one format.
Replacements
Listings that take over the same core job as GoFlow2.
nfdump
A suite of command-line tools for collecting, processing and analyzing NetFlow, IPFIX and sFlow data.
nfdump is a BSD-licensed command-line suite that collects and also filters, aggregates and stores flow records, with geolocation enrichment.
pmacct
A set of passive network monitoring tools that collect NetFlow, IPFIX, sFlow, packet and BGP data.
pmacct collects NetFlow, IPFIX and sFlow and also gathers BGP, BMP and RPKI routing data, configured through text files with many keys.
Akvorado
Self-hosted flow collector, enricher and visualizer for NetFlow, IPFIX and sFlow traffic data.
Akvorado collects, enriches and stores flows with its own web console for exploring traffic, but involves several components to deploy and is not open source.
Similar software
Related functionality, not a direct replacement.
ntopng
Web-based network traffic probe that shows real-time and historical flows by host, protocol and application.
Arkime
Store and search captured network traffic through a web interface.
Malcolm
A self-hosted network traffic analysis suite that turns PCAP files, Zeek logs and Suricata alerts into searchable dashboards.
Hubble
A network, service and security observability tool for Kubernetes clusters running Cilium, built on eBPF.
