Network flow visualization

Problem

Legacy flow tooling was opaque and hard to query: no fast way to see who is sending what, where the traffic concentrates, or to investigate an anomaly after the fact.

Approach

Routers export flow records into a streaming pipeline that normalises and writes them to a columnar store with a bounded retention window. A query API and UI expose top-talkers, per-interface breakdowns and time-range investigation — fast enough to answer operational questions in seconds.

Stack

Outcomes

• Self-service traffic analytics in place of an opaque legacy tool
• Sub-second queries over a bounded retention window
• Per-interface and top-talker views for fast incident investigation
• Flow data from multiple exporters unified in one store