NetFlow
E171416
NetFlow is a network protocol developed by Cisco for collecting and analyzing IP traffic flow data to support monitoring, accounting, and security.
All labels observed (6)
| Label | Occurrences |
|---|---|
| NetFlow canonical | 4 |
| NetFlow v1 | 1 |
| NetFlow v5 | 1 |
| NetFlow v7 | 1 |
| NetFlow v8 | 1 |
| NetFlow v9 | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T1503397 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: NetFlow Context triple: [Cisco IOS, supportsFeature, NetFlow]
-
A.
Wireshark
Wireshark is a widely used open-source network protocol analyzer that captures and interactively inspects traffic on computer networks for troubleshooting, analysis, and security auditing.
-
B.
ThousandEyes
ThousandEyes is a network intelligence and digital experience monitoring company, best known for its internet and cloud visibility platform that helps organizations troubleshoot and optimize application performance across complex, distributed environments.
-
C.
SNMP
SNMP (Simple Network Management Protocol) is a standard Internet protocol used to monitor, manage, and configure network devices such as routers, switches, and servers.
-
D.
Network Control Protocol
Network Control Protocol was an early host-to-host communication protocol that formed the basis of data transmission on the ARPANET before the adoption of TCP/IP.
-
E.
NAT-T
NAT-T (NAT Traversal) is an IPsec extension that enables VPN traffic to pass through Network Address Translation devices by encapsulating IPsec packets in UDP.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: NetFlow Target entity description: NetFlow is a network protocol developed by Cisco for collecting and analyzing IP traffic flow data to support monitoring, accounting, and security.
-
A.
Wireshark
Wireshark is a widely used open-source network protocol analyzer that captures and interactively inspects traffic on computer networks for troubleshooting, analysis, and security auditing.
-
B.
ThousandEyes
ThousandEyes is a network intelligence and digital experience monitoring company, best known for its internet and cloud visibility platform that helps organizations troubleshoot and optimize application performance across complex, distributed environments.
-
C.
SNMP
SNMP (Simple Network Management Protocol) is a standard Internet protocol used to monitor, manage, and configure network devices such as routers, switches, and servers.
-
D.
Network Control Protocol
Network Control Protocol was an early host-to-host communication protocol that formed the basis of data transmission on the ARPANET before the adoption of TCP/IP.
-
E.
NAT-T
NAT-T (NAT Traversal) is an IPsec extension that enables VPN traffic to pass through Network Address Translation devices by encapsulating IPsec packets in UDP.
- F. None of above. chosen
Statements (56)
| Predicate | Object |
|---|---|
| instanceOf |
IP traffic flow monitoring technology
ⓘ
network protocol ⓘ |
| basedOn | IP flow records ⓘ |
| benefit |
forensic analysis of network incidents
ⓘ
identification of top applications ⓘ identification of top talkers ⓘ visibility into network traffic patterns ⓘ |
| collects |
IP protocol
ⓘ
Type of Service ⓘ byte counters ⓘ destination IP address ⓘ destination port ⓘ egress interface ⓘ flow end timestamp ⓘ flow start timestamp ⓘ ingress interface ⓘ packet counters ⓘ source IP address ⓘ source port ⓘ |
| dataModel | template-based (v9 and later) ⓘ |
| developer | Cisco Systems ⓘ |
| domain | computer networking ⓘ |
| exportedBy |
firewalls
ⓘ
load balancers ⓘ routers ⓘ switches ⓘ |
| exportProtocol |
SCTP
ⓘ
UDP ⓘ |
| hasVersion |
NetFlow v1
ⓘ
linked to:
NetFlow
NetFlow v5 ⓘ
linked to:
NetFlow
NetFlow v7 ⓘ
linked to:
NetFlow
NetFlow v8 ⓘ
linked to:
NetFlow
NetFlow v9 ⓘ
linked to:
NetFlow
|
| inspired | IPFIX ⓘ |
| introducedBy | Cisco IOS ⓘ |
| operatesAtLayer | network layer ⓘ |
| relatedTo |
IPFIX
ⓘ
sFlow ⓘ |
| requires |
NetFlow analyzer
ⓘ
NetFlow collector ⓘ NetFlow exporter ⓘ |
| standardizedAs | IPFIX ⓘ |
| supports |
IPv4
ⓘ
IPv6 ⓘ |
| typicalDeployment |
enterprise networks
ⓘ
service provider networks ⓘ |
| usedFor |
DDoS detection
ⓘ
IP traffic flow analysis ⓘ IP traffic flow collection ⓘ anomaly detection ⓘ billing and usage-based charging ⓘ capacity planning ⓘ network accounting ⓘ network monitoring ⓘ network security analysis ⓘ traffic engineering ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: NetFlow Description of subject: NetFlow is a network protocol developed by Cisco for collecting and analyzing IP traffic flow data to support monitoring, accounting, and security.
Referenced by (9)
Full triples — surface form annotated when it differs from this entity's canonical label.
linked to: NetFlow
linked to: NetFlow
linked to: NetFlow
linked to: NetFlow
linked to: NetFlow
subject linked to:
Cisco NX‑OS