Netflow Tools __hot__ Jun 2026

: 30-day retention, detect botnet C2, per-department billing.

plugins: kafka aggregate: src_host, dst_host, src_port, dst_port, proto, tos, src_as, dst_as kafka_topic: netflow_raw kafka_broker_host: kafka1:9092,kafka2:9092 imt_path: /var/spool/pmacct netflow tools

Ransomware spreads fast. Before files are encrypted, the malware usually "calls home" to a command-and-control server. : 30-day retention, detect botnet C2, per-department billing