> BTW, ovs have netflow support. I'm looking for something similar for linux > bridge. > > I found this: > http://sourceforge.net/projects/ipt-netflow/ Interesting. But its not much code, so I wonder why this is faster than ipt or nft?