Kernel-based Process Monitoring on Linux Endpoints for File System, TCP and UDP Networking Events and optionally DNS and HTTP Application Messages via eBPF Subsystem

pmacct is a small set of multi-purpose passive network monitoring tools [NetFlow IPFIX sFlow libpcap BGP BMP RPKI IGP Streaming Telemetry].

Web-based Traffic and Security Network Traffic Monitoring

Open source security data pipelines.

NetFlow aggregation and graph toolkit

Flow collector, enricher and visualizer

Send netflow data from nfdump files to OpenObserve

High performance sFlow/IPFIX/NetFlow Collector

Fluere is a powerful and versatile tool designed for network monitoring and analysis. It is capable of capturing network packets in pcap format and converting them into NetFlow data, providing a comprehensive view of network traffic. It also Provides Terminal User Interface.

A comprehensive overview of datasets for research in host-based and/or network-based intrusion detection with a focus on enterprise networks

NFStream: a Flexible Network Data Analysis Framework.

Netflow processing tools

Prometheus exporter for NetFlow

Open source components and extensions for nProbe

Testbed for testing NetFlow/IPFIX network monitoring probes. Includes tools for PCAP generation and replay of 1/10/100G network traffic.

go-nfdump: A Go module to read and process nfdump files

Web GUI for AS-Stats

NetFlow v9 collector for ntopng

FastNetMon - very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support

A simple network flow monitoring application