For internet providers

    Traffic and location data retention for Czech ISPs

    This solution is specific to Czech law. FlowPro NG stores flows from your routers, adds the subscriber to every IP address and, on request, prepares an export in the format set by Czech Decree No. 357/2012 Coll. All on your own server, with no data handed to third parties.
    Try it free for 14 daysOnline demo
    flowpro.local/flowpro/flows
    Flow browser in FlowPro NG

    Czech law requires ISPs to keep data for 6 months and hand it over quickly on request

    Under Section 97(3) of the Czech Electronic Communications Act (No. 127/2005 Coll.), operators of public communications networks or services must retain traffic and location data for 6 months and then destroy it unless it was provided to authorised bodies. Content is not retained. Decree No. 357/2012 Coll. sets the scope and format of the data.

    For internet access this includes the user identifier, MAC address, connection start and end, IP address and port and, with address translation, the private and public address pair. Smaller ISPs often have this spread between routers and a billing system, so a police request means hours of manual work.

    What you get

    ISP data retention in FlowPro NG

    Flows from ISP routers

    The collector accepts NetFlow v5/v9, IPFIX and sFlow from your routers and stores them in ClickHouse. Every connection has its time, source and destination IP, ports, protocol and volume.

    Subscriber database

    Import subscribers from CSV: IP address and name, optionally customer number, MAC address, service type, access point, ESSID, address, RÚIAN code and GPS coordinates. Subscriber locations are shown on a map.

    ISPadmin synchronisation

    Using ISPadmin? FlowPro NG pulls the IP-to-subscriber mapping through its REST API automatically once a day, or manually at any time.

    Subscriber on every flow

    Every flow is enriched with the subscriber name by IP address, so you do not have to look the subscriber up in another system.

    Export per Decree No. 357/2012 Coll.

    Choose a time window and filters and FlowPro NG prepares an export in the decree format, or a standard export with all columns including GeoIP and subscriber data. CSV, Excel and PDF formats.

    Automatic deletion after the period

    Set the flow retention period in Settings → Data Retention. Older data is deleted automatically, so you do not keep it longer than you have to.

    • Zákon č. 127/2005 Sb.
    • Vyhláška č. 357/2012 Sb.
    • NetFlow v5
    • NetFlow v9
    • IPFIX
    • sFlow
    • ISPadmin
    • ClickHouse
    • CSV
    • RÚIAN

    How it works

    Up and running in a few steps

    1. 01

      Point router flows at FlowPro NG

      On your edge and aggregation routers, point the NetFlow/IPFIX/sFlow export at FlowPro NG (UDP port 12051). The number of flow sources depends on your license or the Flow Pack add-on.

    2. 02

      Load your subscribers

      Import the sample CSV filled with your subscribers, or turn on ISPadmin sync. From then on flows show the subscriber name.

    3. 03

      Set retention and export on request

      Set the flow retention period. When a request from an authorised body arrives, search flows by IP address and time and export them in the decree format.

    FAQ

    Frequently asked questions

    How long must Czech ISPs retain traffic data?

    Under Section 97(3) of Czech Act No. 127/2005 Coll., 6 months. After that period the data must be destroyed unless it was provided to authorised bodies or the law provides otherwise.

    What does Decree No. 357/2012 Coll. regulate?

    The decree on the retention, transfer and destruction of traffic and location data defines which data is kept for each service and in what structure it is handed over. For internet access this includes the user identifier, MAC address, connection start and end, IP address and port and, for address translation, the private and public address.

    Does FlowPro NG make me compliant on its own?

    No, it helps you meet the obligation. FlowPro NG keeps flows, maps them to subscribers and prepares the export, but whether you hold all the required data also depends on your network, for example on flow export from routers and your subscriber records. Check the exact scope of your obligations with a lawyer.

    Where is my subscribers' traffic data stored?

    Only on your own server. FlowPro NG sends neither flows nor the subscriber database to any third party. Only the license check and technical instance status leave the server.

    Related solutions

    NetFlow analysisWho talks to whom on your network, how much and where. NetFlow, IPFIX and sFlow from routers and firewalls, no traffic mirroring.Network anomaly detection17 detections over network flows every minute: port scans, floods, data exfiltration, beaconing, lateral movement, tunnels.SIEM and log managementLogs from servers, workstations and network devices in one place. Search, detection rules and alerts on your own server.
    How FlowPro NG compares to Wazuh, Elastic, Splunk and Flowmon

    Try it on your own network

    The 14-day Enterprise trial unlocks every module. You install it on your own server, no credit card needed.

    Start Free TrialOnline Demo