JsonFlow software is compatible with VM, Docker, X86 server and enables analysis of TCP/UDP/HTTP/SQL sessions along with process/CPU/MEM. It produces 20 KPIs and 10 latency with URL/SQL through JSON. It captures packets in the PCAP format using FIFO and allows for playback or forwarding packets remotely.

One of the biggest advantages of JsonFlow is its versatility. It can be used with VM, Docker, X86 server, or PC, and works at the operating system layer, regardless of the user's business type and network architecture. Additionally, it can be deployed as a host AGENT program, or independently deployed to receive network traffic from SPAN/RSPAN/ERSPAN.
But that's not all - JsonFlow also has the ability to automatically analyze VXLAN / GRE protocol traffic, and can analyze TCP/UDP/HTTP/SQL sessions and associated process information in real time. It outputs 20 KPIs+10 latency and URL/SQL and process name/CPU/MEM by JSON, which can be stored locally for playback or query. More importantly, it can be sent to the remote data collector (such as KAFKA, logstash...)in real time, ES can directly use these data without any development.
JsonFlow also offers packet capture capabilities, allowing users to capture packets to local PCAP files by FIFO, and playback PCAP or forward packets (in real time) to remote address by VXLAN. Plus, it provides RESTful API.
If you're concerned about resource consumption and impact on other applications, you can rest easy with JsonFlow. It only occupies 50MB of memory and even at 500Mbps, it only occupies 8% in only one vCPU. Best of all, JsonFlow is a pure C program, meaning there's no need to install the dependent environment.
Finally, JsonFlow can be combined with VPM Cloud Traffic Monitoring or the user's big data platform to realize real-time online monitoring of abnormal traffic and performance. All told, JsonFlow represents the highest level of cloud traffic capture, analysis, distribution, and backtracking - making it the best partner for cloud traffic visualization.
Version 3.0:
1. Added association function between communication session and process information (name/CPU/memory);
2. Added PCAP traffic playback function;
3. Added Restful API;
4. Added query function in JSON file;
5. Fixed some bugs.