# nfsen-ng

> Self-hosted NetFlow/sFlow/IPFIX analyzer replacing NfSen. Runs on Linux via Docker/bare metal. Real-time dashboards with RRD or VictoriaMetrics storage.

- **Category:** Network Monitoring
- **Licence:** Apache-2.0
- **Latest version:** v1.0.0-beta.7
- **Open source:** oss
- **Languages:** JavaScript, PHP
- **Platforms:** Docker Compose, Linux
- **Tags:** Real Time, Mcp, Visualization, Network, Network Analysis, Network Monitoring, Docker, Php, Netflow, Sflow, Traffic analysis, Ipfix, Rrd, Victoriametrics, Nfdump, Nfsen, Openswoole, Sankey, Nfsen Ng

## Description

nfsen-ng provides a web interface for analyzing NetFlow, sFlow, and IPFIX traffic data. It acts as a modern replacement for the NfSen frontend while using the nfdump toolkit and nfcapd collector underneath. The interface updates in real time through Server-Sent Events via the Datastar library. Seven main views exist: a traffic overview with graphs and key metrics, top talkers ranked by any nfdump statistic, individual flow records with raw output, conversation maps as Sankey diagrams or matrices, threshold-based alerts with history, system health monitoring, and configuration settings. Time-series metrics can be stored in RRD databases or VictoriaMetrics, while filters, alert history, and precomputed rankings use SQLite. The server runs on PHP 8.4 with the OpenSwoole extension (Linux only) via the php-via framework. Deployment options include Docker Compose (recommended) or bare-metal installation on Ubuntu or Debian. The application has no built-in authentication and depends on a reverse proxy or network placement for access control. An optional read-only MCP server enables AI-assisted traffic investigation. All configuration uses NFSEN_* environment variables. Minimum requirements are PHP 8.4 with the necessary extensions for OpenSwoole, inotify, brotli compression, RRD support, and SQLite via PDO, plus nfdump 1.7.10 or newer, and a 512 MB memory limit. The project is in beta (version 1.0.0-beta.6 as of October 2026) and maintained by Michael Bolli.

## Links

- [Homepage](https://github.com/mbolli/nfsen-ng)
- [Website](https://mbolli.github.io/nfsen-ng/)
- [Docker](ghcr.io/mbolli/nfsen-ng)
- [GitHub Repository](https://github.com/mbolli/nfsen-ng)
- [Docker Images (GHCR)](https://github.com/mbolli/nfsen-ng/pkgs/container/nfsen-ng)

---
Source: https://selfhost.directory/project/nfsen-ng