Some popular open-source NetFlow collectors include:
The question is no longer "can open source do this?" but rather "why pay for a black box?". opensource netflow collector
This feature allows your NetFlow collector to , then automatically cross-reference these patterns with Threat Intelligence (TI) feeds. opensource netflow collector