Alternatives to pmacct
A set of passive network monitoring tools that collect NetFlow, IPFIX, sFlow, packet and BGP data. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
pmacct
A set of passive network monitoring tools that collect NetFlow, IPFIX, sFlow, packet and BGP data.
Replacements
Listings that take over the same core job as pmacct.
nfdump
A suite of command-line tools for collecting, processing and analyzing NetFlow, IPFIX and sFlow data.
nfdump collects and analyses NetFlow, IPFIX and sFlow with filtering and aggregation, but does not collect BGP, BMP or RPKI routing data.
GoFlow2
A NetFlow, IPFIX and sFlow collector written in Go that normalises flow data into one format.
GoFlow2 collects NetFlow, IPFIX and sFlow and normalises them into one format, lacking BGP data collection and needing separate storage and dashboards.
Akvorado
Self-hosted flow collector, enricher and visualizer for NetFlow, IPFIX and sFlow traffic data.
Akvorado combines flow collection, enrichment and a web console for exploring traffic, with several components to deploy and maintain.
ntopng
Web-based network traffic probe that shows real-time and historical flows by host, protocol and application.
ntopng offers a web interface with nDPI application detection and historical flows, with some features requiring a paid licence.
Similar software
Related functionality, not a direct replacement.
bgp.tools
A web tool for exploring BGP routing, ASNs, prefixes and peering, with paid network monitoring.
Arkime
Store and search captured network traffic through a web interface.
Malcolm
A self-hosted network traffic analysis suite that turns PCAP files, Zeek logs and Suricata alerts into searchable dashboards.
vnStat
A console network traffic monitor for Linux and BSD that logs interface usage over time.
