pmacct
pmacct is a suite of passive network monitoring tools that collect, store, and analyze traffic data through multiple protocols and data sources. It supports NetFlow, IPFIX, sFlow, libpcap, BGP, BMP, RPKI, IGP, and Streaming Telemetry, allowing it to aggregate accounting and reconnaissance information from routers, switches, and probes. The toolkit includes several daemons such as pmacctd, nfacctd, sfacctd, and uacctd, each tailored to a specific input method or data format. Collected data can be exported to databases like MySQL, PostgreSQL, SQLite, and MongoDB, or to messaging systems such as Kafka, AMQP, and NSQ for real-time processing. pmacct is commonly used by ISPs, data centers, and enterprises for traffic accounting, network forensics, capacity planning, billing, and security analysis. It is open source, distributed under a BSD-style license, and available as official Docker images for streamlined deployment.