Enriches any passing flow message with a customer id field based on a CIDR match.

Anonymize uses the CryptoPan prefix-preserving IP address sanitization as specified by J.

Enriches flows with infos from BGP.

Drops fields from any passing flow.

Enriches flows with a geolocation.

Rewrites passing flows with all sampling rate affected fields normalized.

Enriches any passing flow message with the human readable protocol.

Determines the remote address of flows based on different criteria.

Rewrites the Note field of passing flows to the remote addresses reverse DNS entry.

Enriches passing flows with human-readable versions of interface ids, sourced from SNMP.