Andrisoft Wansight vs nfdump
Andrisoft Wansight
andrisoft.comnfdump
github.comSide by side
| Figure | Andrisoft Wansight | nfdump |
|---|---|---|
| Price from | $28.75/mo | Free |
| Free plan | — | Yes |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | — |
| Linux | Yes | Yes |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 1 |
| Spec score · Network Traffic Analysis Software | 8.6 (#3) | 7.5 (#15) |
| Integrations | The Console supports SAML 2.0, LDAP, Active Directory, and RADIUS authentication, plus a REST API, CLI, and scripts. | The project documents metric export through nfinflux for InfluxDB and nfexporter for Prometheus-compatible tools, and says it is compatible with NfSen. |
| Purpose | Wansight provides network traffic monitoring, analysis, and accounting without DDoS detection or mitigation. | nfdump is a suite of tools for collecting, processing, and analyzing NetFlow, IPFIX, and sFlow data from network devices. |
| Support | Standard support is included with every license and is available by email and web portal Monday to Friday. | The project points users to its man pages, GitHub issues and pull requests, and the email address in AUTHORS for questions. |
Plans
In their own words
Andrisoft Wansight
Andrisoft Wansight monitors, analyzes, and accounts for network traffic for NOC and IT operations teams. It does not provide DDoS detection or mitigation. Flow Sensors process flow data such as NetFlow, sFlow, jFlow, NetStream, and IPFIX, while Packet Sensors inspect traffic from mirror ports, TAPs, and in-line links. Analytics include graphs by IP, subnet, and IP group, decoder reports, top lists, and 95th-percentile accounting.
The Flow Collector can search, filter, and export flows, and Packet Tracer displays packet captures in a Wireshark-like view. Reports can cover periods from five seconds to ten years and be emailed on a schedule as PDF or Excel. Linux packages run on customer servers, with a web Console for centralized management, scoped customer and department views, role-based profiles, and white-label branding. The Console also supports SAML 2.0, LDAP, Active Directory, RADIUS, REST API, CLI, and scripts. The one-year Sensor license costs $345 a year for one Packet Sensor or one Flow Sensor, monitoring only. A reviewed request can qualify for a free 30-day evaluation license.
nfdump
nfdump is free BSD-licensed software for collecting, processing, and analyzing network-flow data in Linux self-hosted deployments. It handles NetFlow versions 1, 5, 7, and 9, IPFIX, and sFlow versions 4 and 6, and can convert live or PCAP-file traffic into flow data. Analysis includes tcpdump-like filtering, user-defined aggregation, flow statistics, conversation analysis, and bandwidth monitoring. Optional databases can add geolocation, autonomous-system, and Tor exit-node details. Results can be written as text, CSV, JSON, or user-defined formats. The suite includes nfcapd, sfcapd, nfdump, nfanon, nfexpire, and nfreplay. Collected files support LZO, LZ4, ZSTD, and bzip2 compression; ZSTD and bzip2 need system libraries. Metric export is documented through nfinflux for InfluxDB and nfexporter for Prometheus-compatible tools, and compatibility with NfSen is documented. Root privileges are unnecessary unless binding below port 1024. nfcapd has no built-in access control, so host-level filtering should protect source addresses. Version 1.7.x reads files from nfdump 1.6.18 or newer.