Many network operators still lack systems or rely on outdated non-distributed technology from the 90’s to ingest, store, process, and visualize network traffic data. This results in sparse network visibility, delayed data, painfully slow query times, and the absence of programmatic detection and response to anomalies. With the majority of network operators scouring graphs or waiting for complaints, many problems are never discovered. During this talk we will present the “State of the Union” for large-scale flow-based network traffic tools, including both open-source and commercial options. We’ll discuss features and benefits related to network and performance data, visualizations, correlations, anomaly detection, and automatic actions.