Intermapper vs nfdump
Intermapper
intermapper.comnfdump
github.comSide by side
| Figure | Intermapper | nfdump |
|---|---|---|
| Price from | — | Free |
| Free plan | — | Yes |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | — |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | Yes |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 1 |
| Spec score · Network Traffic Analysis Software | 8.0 (#7) | 7.5 (#15) |
| Integrations | Intermapper can complement other tools through APIs and add-ons, including the Intermapper App for Splunk. | The project documents metric export through nfinflux for InfluxDB and nfexporter for Prometheus-compatible tools, and says it is compatible with NfSen. |
| Purpose | Intermapper helps IT teams discover, map, monitor, and alert on network devices and servers. | nfdump is a suite of tools for collecting, processing, and analyzing NetFlow, IPFIX, and sFlow data from network devices. |
| Security | Remote access supports SSL connections and username/password or network-address authentication. | The documentation says nfcapd has no built-in access control, so host-level security should filter source IP addresses. |
| Support | Maintenance plans include telephone, email, and online technical support as well as new software releases; paid Intermapper licenses include 24/7 technical support according to the upgrade page. | The project points users to its man pages, GitHub issues and pull requests, and the email address in AUTHORS for questions. |
Plans
In their own words
Intermapper
Intermapper helps IT teams discover network devices and servers, map their relationships, monitor health and performance, and receive alerts when conditions change. Its live maps show infrastructure, dependencies, device status, and network connections. Auto-discovery identifies devices and helps keep the network view current as environments change. Flows Insight analyzes NetFlow, sFlow, jFlow, and cFlow data to show traffic patterns, utilization, and top talkers. Advanced Reporting provides dashboards and automated reports for uptime, service health, SLA performance, and infrastructure trends. Intermapper supports SNMPv3, includes built-in probes, and allows custom probes. APIs and add-ons, including the Intermapper App for Splunk, can complement other tools. Remote access supports SSL and username/password or network-address authentication. A fully functional 30-day trial is available, but continuing afterward requires a purchase. Licensing is based on monitored devices, with subscription or perpetual options starting at 10 devices and extending to unlimited; pricing is by custom quote. Paid licenses include 24/7 technical support according to the upgrade page.
nfdump
nfdump is free BSD-licensed software for collecting, processing, and analyzing network-flow data in Linux self-hosted deployments. It handles NetFlow versions 1, 5, 7, and 9, IPFIX, and sFlow versions 4 and 6, and can convert live or PCAP-file traffic into flow data. Analysis includes tcpdump-like filtering, user-defined aggregation, flow statistics, conversation analysis, and bandwidth monitoring. Optional databases can add geolocation, autonomous-system, and Tor exit-node details. Results can be written as text, CSV, JSON, or user-defined formats. The suite includes nfcapd, sfcapd, nfdump, nfanon, nfexpire, and nfreplay. Collected files support LZO, LZ4, ZSTD, and bzip2 compression; ZSTD and bzip2 need system libraries. Metric export is documented through nfinflux for InfluxDB and nfexporter for Prometheus-compatible tools, and compatibility with NfSen is documented. Root privileges are unnecessary unless binding below port 1024. nfcapd has no built-in access control, so host-level filtering should protect source addresses. Version 1.7.x reads files from nfdump 1.6.18 or newer.