Who is InMon?
InMon Corporation is a network traffic monitoring and analytics vendor known for originating the sFlow technology for scalable, packet-sampled telemetry in Ethernet and IP networks.
- Developer and maintainer of the sFlow protocol and associated telemetry specifications for switched and routed networks (network observability).
- Software tools for collecting, analyzing, and visualizing sFlow-based measurements from switches, routers, servers, and virtualized infrastructure (network analytics).
- Support for capacity planning, Traffic Engineering (TE), and performance troubleshooting in enterprise and service provider environments (IT operations monitoring).
- Security-focused traffic visibility for anomaly detection, Distributed Denial of Service (DDoS) monitoring, and policy validation using flow and packet sampling data (network security analytics).
- Guidance, reference architectures, and technical resources for designing sFlow-enabled monitoring deployments across data centers and campus networks (professional and technical services).
Show more
More About InMon
InMon Corporation focuses on network telemetry and analytics, with its offerings built around the sFlow protocol (network observability) used to export packet samples, flow records, and interface counters from switches, routers, servers, and virtual devices. sFlow integrates into network devices at the forwarding plane level, using statistical sampling and counter polling to provide continuous visibility into traffic and utilization while controlling resource overhead on forwarding hardware and management systems.
Enterprises and service providers use InMon technology to collect sFlow data from Ethernet and IP infrastructure, aggregating telemetry from core, aggregation, and access layers as well as from virtual switches and cloud-hosted workloads where supported. The resulting data stream supports use cases such as traffic analysis, capacity planning, performance troubleshooting, and validation of network engineering decisions. By working with sampled packets and counters rather than full packet captures, sFlow-based monitoring is designed to scale to multi-gigabit and multi-terabit environments common in modern data centers and carrier backbones.
InMon’s software platforms (network analytics) act as central collectors and analyzers for sFlow streams, providing views of top talkers, applications, interfaces, and paths across the network. These tools correlate traffic statistics with device and interface metadata to help operations teams identify congestion, misconfigurations, or abnormal patterns. In environments with Quality of Service (QoS) policies or TE strategies, analytics based on sFlow data support validation of policy behavior and link utilization over time.
Security Operations (SecOps) teams use InMon’s sFlow-based visibility (network security analytics) to detect volumetric anomalies, high-rate scans, or other unusual traffic distributions that may indicate Denial of Service (DoS) attacks or compromised hosts. Because sFlow exports packet headers along with counters, analysts and automated systems can classify traffic by protocol, port, and address without requiring full payload capture, which can reduce storage and processing requirements.
From an architectural perspective, InMon’s offerings System Integration Testing (SIT) in the network monitoring and observability layer, consuming telemetry generated by hardware and software switches and presenting information to network, security, and capacity planning functions. In marketplace and directory taxonomies, InMon aligns with categories such as network performance monitoring and diagnostics (NPMD), network traffic analytics, and security-focused flow analytics, centered on the sFlow protocol and its deployment across enterprise and service provider infrastructures.
Our description of InMon. Updated December 2025.
