Netflow Free |link| Official

"UNPACKING A DARK PACKET: TOWARDS NETFLOW-FREE INTRUSION DETECTION" (or similar practical alternatives) (Note: Since no single paper is universally standard, I highlight the most practical approach below.) Recommended Interesting Paper: "FlowLens: Enabling Efficient Flow Classification for ML-based NIDS on Programmable Switches" (NSDI '23) – While not purely "NetFlow-free", it shows how to avoid exporting raw NetFlow by doing classification in-network.