At a high level, netflow data creates a picture of traffic flow and volume across a network. It can show which server communicated with another, information that may ordinarily only be available to the server owner or the ISP carrying the traffic. Crucially, this data can be used for, among other things, tracking traffic through virtual private networks, which are used to mask where someone is connecting to a server from, and by extension, their approximate physical location.

Cox, J. (2021, August 24). How data brokers sell access to the backbone of the internet. Vice. https://www.vice.com/en/article/jg84yy/data-brokers-netflow-data-team-cymru