akvorado, an open source network flow collector and visualizer that ingests NetFlow, IPFIX and sFlow, enriches it and makes it explorable.
Akvorado receives network flows from routers and switches over NetFlow, IPFIX and sFlow, enriches each flow with metadata such as source and destination AS number, country, BGP routing information and interface names, then stores the results in a ClickHouse database for fast analysis. Its web console lets you explore traffic interactively, breaking volume down by protocol, port, AS, country, interface and more, so network operators can see who is talking to whom and how their capacity is being used.
cloudimg ships the complete Akvorado stack, the collector, enricher and web console together with its ClickHouse store and streaming broker, pinned and preloaded so it starts serving the moment the VM boots. No known password is baked into the image: every datastore credential and a front door password for the console are generated uniquely on this VM's first boot. Every image comes fully patched with a paired deployment guide and 24/7 support.
Real screenshots taken while testing this image against its deployment guide.