8–12 Jun 2026
Helsinki, Finland
Europe/Helsinki timezone

Network Flow Monitoring: An Evaluation of Modern Collector Software

10 Jun 2026, 14:30
30m
Black Box

Black Box

Single Presentation - 25 min Modern Software for Modern Networks

Speaker

Yannick Huber (BelWü)

Description

Network observability is a crucial aspect of operations that is often supported by flow-based traffic monitoring. This presentation provides an evaluation of six actively maintained open-source flow collectors for sFlow and IPFIX data: Akvorado, GoFlow2, IPFIXcol2, nfdump, pmacct, and SiLK. These collectors enable self-sovereign flow collection, as they can be deployed on-premises on modern Linux-based operating systems. Our evaluation combines qualitative analysis of features and usability with quantitative performance benchmarking in a controlled test environment. The results are relevant for high-performance NREN and ISP networks to make an informed decision that fits the operational requirements of their network best.

What will the TNC audience take away from your talk?

Attendees will gain a clear decision-making aid to support data-driven selection of the right tools for their environments. Rather than prescribing a "single best tool", we provide the facts required to match a tool to a specific set of requirements. Whether the audience needs a lightweight collector for a simple deployment or a robust, high-performance pipeline for large-scale monitoring, they gain functionality and performance insights into modern open-source flow collectors. Those insights enable a fact-based selection tailored to their specific environment.

Are you a first time speaker at TNC? Yes

Primary authors

Benjamin Steinert (University of Tübingen) Mr Gabriel Paradzik (University of Tübingen) Mr Lukas Pietzschmann (Ulm University) Yannick Huber (BelWü)

Presentation materials