NetStream is still equivalent to NetFlow. NetStream is brought by Huawei (NetStream Huawei) while NetFlow is a monitoring protocol created by Cisco. In an article published by Noction, NetStream and NetFlow have in common that they are streams that already use based on active and inactive timers.
Definition of NetStream
According to another article published by Huawei, it states that NetStream is used to collect statistics and analyze traffic on the network. NetStream collects packet statistics based on flows. In NetStream, sample inbound and outbound at each interface, classify network traffic based on the main factors in the packet (for example, source IP address, destination IP address, destination port number, source port number), and filter and aggregate data. Users can customize templates to classify and collect statistics on network traffic.
NetStream Infrastructure
Noction also explained that there are 3 NetStream infrastructures, namely: NetStream data exporter (NDE), NetStream collector (NSC), and NetStream data analyzer (NDA). Specifically, NSC and NDA are usually both integrated on one server, while NDA is a tool for analyzing traffic. NDA functions to extract statistics from NSC, process statistics, and generate reports. The reports can be used for monitoring attacks on the network, traffic accounting, and network design.
The NDE sample package is useful for reducing the impact on device performance. For example, when the NDE is set up for packet-based random sampling, it randomly samples packets from a certain number of transmitted packets. The NetStream cache in the NDE is used to store stream records. When the stream is obsolete, the NDE exports the stream statistics from the cache to the NSC using NetStream packets. Not only that, the NDE periodically exports flow statistics to the NSC which will then aggregate and parse packets from multiple NDEs and store them in a database.
Source:
https://www.noction.com/blog/netflow-sflow-ipfix-netstream-network-traffic-monitoring-explained