It translates binary flow data into readable text or numeric formats.
It handles high volumes of incoming UDP datagrams from multiple exporters across the network. netflow collection engine
Writing flow data to disk is the primary bottleneck. It translates binary flow data into readable text
A NetFlow collector sits between exporters (routers, switches, firewalls) and analysis tools (like SIEM, NMS, or traffic analytics platforms). Its core responsibilities include: firewalls) and analysis tools (like SIEM
This server receives the exported flow records, which are typically sent via User Datagram Protocol (UDP). The engine is responsible for ingesting, pre-processing, and storing this data for future use.
Further reading: RFC 7011 (IPFIX Protocol), Cisco IOS NetFlow Configuration Guide, pmacct documentation.