The Cisco NetFlow Solution
based on IP flows (5-tuple of protocol, source IP, source port, destination IP, destination port)
router maintains flow state information (cache of current flows)
flow data can be exported via UDP
exported data may contain additional information per flow (source and destination netmask, source and destination interface, source and destination AS)