# What is NetFlow, or flow data?

NetFlow, and similar formats such as IPFIX and sFlow, are summaries of network connections that routers and switches can export: who talked to whom, on which ports, when, and how many bytes and packets. A flow record is like a phone bill: it lists calls, not what was said. Flow data is useful for capacity planning and for spotting unusual volumes or destinations, and it is cheaper to store than full traffic. It misses details such as DNS answers or the TLS handshake. NetSenX reads its own copy of the traffic from an agent or a mirror port rather than relying only on exported flow records.

FAQ: [What is…? Network and security terms](https://netsenx.com/en/faq/glossary) · https://netsenx.com/en/faq/what-is-netflow-and-flow-data

## Read next

- https://netsenx.com/en/what-is-ndr
- https://netsenx.com/en/problems-we-solve

## Related questions

- [What is ARP, and what is ARP spoofing?](https://netsenx.com/en/faq/what-is-arp-and-arp-spoofing)
- [What are TCP and UDP?](https://netsenx.com/en/faq/what-is-tcp-and-udp)
- [What are ICMP and ping?](https://netsenx.com/en/faq/what-is-icmp-and-ping)
- [What is SMB, the file-sharing protocol?](https://netsenx.com/en/faq/what-is-the-smb-file-sharing-protocol)
- [What is a domain controller?](https://netsenx.com/en/faq/what-is-a-domain-controller)