Your collectors should only see the flows that matter.
iFlowScreen sits between your flow exporters and collectors, dropping unwanted flows in transit — so your collectors process less, and cost less to license and run.
A transparent proxy between exporters and collectors
iFlowScreen requires no changes on the collector side. Point your exporters at it, and it forwards a filtered stream onward.
Accept UDP flow packets
From your routers, switches and other exporters — NetFlow v5/v9, IPFIX and sFlow.
Deconstruct & drop
Each packet is unpacked into individual flows; those classified as not interesting are discarded.
Reconstruct & send
Remaining flows are reassembled into valid packets and sent to your flow collectors.
Every dropped flow is a flow you don't pay for
The objective is simple: reduce the number of flows your existing collectors must process.
Licensing
Most collectors are licensed per flows-per-second. Fewer incoming flows means a lower licence tier for the same visibility.
Processing
Less flow volume directly lowers the CPU and RAM your collectors require.
Storage
Receiving fewer flows means less disk space consumed by historical data.
Rule-based matching on flow attributes
NetFlow, IPFIX and sFlow packets are deconstructed, filtered and reconstructed. Flows are matched against the following attributes, whenever they are present in the record:
How rules are evaluated
Every exporting router can have multiple rules, each matching any combination of the five attributes. A rule is intended to match all attributes defined in it — if a flow does not match one rule, the next rule is checked.
Modular architecture — order what you need
iFlowScreen has a modular architecture. The table below describes the modules available to order.
| Module | Description | Code |
|---|---|---|
| Base | Forwards traffic without filtering and shows statistics on passing flows. No FPS licences required. | iFLOWSCREEN-BASE-01-W= |
| NetFlowFilter | Filtering of NetFlow v5 and NetFlow v9 flows. | iFLOWSCREEN-NF-01-W= |
| IPFIXFilter | Filtering of IPFIX flows. | iFLOWSCREEN-iF-01-W= |
| sFlowFilter | Filtering of sFlow flows. | iFLOWSCREEN-SF-01-W= |
| FPS | Flows-per-second licence required for filtering traffic. The Base module does not require it. | iFLOWSCREEN-FPS-01-W= |
Write to us and we will get back to you
For orders, licensing questions or technical enquiries:
info@iflowscreen.org