JFlow

JFlow is primarily a data flow sampling technology created using a collection of Java classes. JFlow operates like NetFlow and SFlow, developed by Cisco and HP, respectively. Although mainly used as a flow recording technique, JFlow also provides network analysis and anomaly detection by saving and comparing network data flow trends.

JFlow works by monitoring each packet that flows inside a network. If an incoming packet is not registered in the router’s table, JFlow records that instance and discards any that already have routing table instances. Data collected by JFlow is maintained in a series of caches, each of which provides a different set of information that pertains to network flow.