ElastiFlow vs FlowViewer

ElastiFlow collects and analyzes network flow and telemetry data for network observability and security analytics. Its performance and availability solution is intended to help network operations and engineering teams find and resolve issues across complex, distributed environments. It handles NetFlow, IPFIX, and sFlow, with application visibility, conversation analysis, and bandwidth monitoring. NetObserv offers visibility, open-data-platform integration, pre-built dashboards, and machine-learning jobs. ElastiFlow extracts more than 6,200 standard and vendor-specific fields from flow records and enriches them with GeoIP, autonomous-system, and IP-reputation information. Supported platforms include Elasticsearch, Elastic Cloud, Elastic Cloud Enterprise, OpenSearch, AWS OpenSearch Service, Apache Kafka, Confluent Platform, Redpanda, Splunk, and Cribl Stream. Deployment options include Docker, Linux, Ansible, and Helm. The virtual appliance supports VMware ESX, Proxmox, and KVM, and is intended for up to 16,000 flows per second from one location. Basic costs nothing and supports up to 4,000 records per second and 25 SNMP devices. A 30-day trial is available.

FlowViewer is free software for analyzing NetFlow data exported by an organization’s network devices. Its interface works with Carnegie Mellon’s SiLK software and also supports the older flow-tools collector. The toolset combines FlowViewer for text reports, FlowGrapher for charts, and FlowMonitor for longer-term traffic monitoring. It supports NetFlow versions 5 and 9, including IPv6, and offers filtering by address, port, interface, autonomous system, TOS, TCP flags, protocol, and next hop. More than 30 reports are available, and reports and filters can be saved. FlowGrapher charts bits, flows, and packets per second over a selected period; FlowMonitor provides RRD graphs for filtered traffic, with views from 24 hours to 3 years. Dashboards can give groups such as Security and Operations separate live views. FlowViewer is listed for Linux and web use and can be installed on a dedicated Unix server or virtual appliance; the software requires a Unix server. The free plan is free. Paid options include hourly support at a price agreed with the maker, router configuration at $500, paid once, training at $500, paid once, and installation at $750, paid once.