NFStream
NFStream is a multiplatform Python framework for network flow data analysis with a focus on speed and flexibility.
NFStream
NFStream is a multiplatform Python framework for network flow data analysis with a focus on speed and flexibility.
Quick facts
NFStream is a Threat Hunting product. Pricing is free.
- Category
- Security Operations
- Subcategory
- Threat Hunting · What is Threat Hunting?
- Pricing model
- Free
- Alternatives
- Managed Agentic Threat Hunting, Turngate, Wraithwatch
- Website
- github.com
- Data verified
- Sep 2026
NFStream Description
NFStream is a multiplatform Python framework providing fast, flexible, and expressive data structures designed to make working with online or offline network data easy and intuitive. It aims to be Python's fundamental high-level building block for doing practical, real-world network flow data analysis. Additionally, it has the broader goal of becoming a unifying network data analytics framework for researchers providing data reproducibility across experiments. - Live Notebook - Project Website - Discussion Channel - Latest Release - Supported Versions - Project License - Continuous Integration - Code Quality - Table of Contents - Main Features - How to get it? - How to use it? - Encrypted application identification and metadata extraction - System visibility - Post-mortem statistical flow features extraction - Early statistical flow features extraction - Pandas export interface - CSV export interface - Extending NFStream - Machine Learning models training and deployment - Training the model - ML powered streamer on live traffic - Building from sources - Contributing - Ethics - Credits - Citation - Authors - Supporting organizations - Publications that use NFStream - License Main Features: - Performance: NFStream is designed to be fast: AF_PACKET
NFStream FAQ
Common questions about NFStream including features, pricing, alternatives, and user reviews.
NFStream is NFStream is a multiplatform Python framework for network flow data analysis with a focus on speed and flexibility. It is a Security Operations solution designed to help security teams with Anomaly Detection, Network Monitoring.
NFStream is built for security teams handling Anomaly Detection, Network Monitoring. Teams typically adopt NFStream when they need to security operations capabilities integrated into their existing stack. Explore similar tools at https://cybersectools.com/alternatives/nfstream
NFStream is a free Security Operations tool. This makes it accessible for organizations of all sizes, from startups to enterprises. Visit https://github.com/nfstream/nfstream/ for download and installation instructions.
Popular alternatives to NFStream include:
1.Managed Agentic Threat Hunting - Managed Agentic Threat Hunting Service (IOC sweeps and hypothesis based hunting) (Commercial)
2.Turngate - SaaS activity analysis platform for log investigation without SIEM complexity. (Commercial)
3.Wraithwatch - AI-driven platform for threat hunting, attack surface analysis & control plans. (Commercial)
4.Respounder - A cross-platform network detection tool that identifies active Responder tools by sending LLMNR queries for fabricated hostnames. (Free)
5.Tstat - Passive sniffer tool for analyzing traffic patterns. (Free)
Compare all NFStream alternatives at https://cybersectools.com/alternatives/nfstream
NFStream is for security teams and organizations that need Anomaly Detection, Network Monitoring. It's particularly suitable for small to medium-sized teams looking for cost-effective solutions. Other Security Operations tools can be found at https://cybersectools.com/categories/security-operations
Have more questions? Browse our categories or search for specific tools.
