Your NetFlow Knows More Than You Think

Ask a room full of network engineers what’s in a flow record, and you’ll get the same answer nine times out of ten: source IP, destination IP, source port, destination port, protocol. The five-tuple. Add bytes and packets and you’ve described the mental model most of the industry still carries around.