What it does
GoFlow2 collects NetFlow, IPFIX and sFlow and serializes records into a common format for downstream processing.
Configure the exporters and receiving sockets, then send normalized records to the downstream system. GoFlow2’s default listeners accept sFlow on 6343 and NetFlow v9/IPFIX on 2055, printing JSON to standard output; file and Kafka/protobuf routes are also documented. NetFlow/IPFIX decoding can wait for templates and sampling information, so an empty early output need not mean no exporter traffic arrived. This is a pipeline component rather than a retained-history dashboard, enrichment service or alerting platform. The separate ReFlow binary is experimental; its capture and aggregation features have their own inputs and build requirements. The project is BSD-3-Clause licensed.
Strengths
- Common output from several flow protocols
- Designed for downstream processing
Watch out for
- Does not supply storage, graphing or alerts