IPCAD runs captures traffic on the specified interfaces (BPF, PCAP, divert, tee, ULOG, IPQ), and records the traffic for later retrieval and analysis. Traffic exported via RSH or NetFlow.
The NetUP ndsad utility captures IP-traffic from network interfaces and export NetFlow v.5.Data is gathered from libpcap library on Unix and from winpcap on Windows.Also you are able to use tee/divert sockets on FreeBSD and ULOG on Linux for data source.