traffic analysis we have pflow(4), our netflow implementation it supports IPFIX and netflow v5 takes states from pf(4) and sends them out as flows to a flow receiver use flowd, nfdump and nfsen from ports to receive and analyse the data