Cloud providers generate flow logs from within their networks, aggregate them, and sell them to their customers. Flowmill's eBPF kernel collector already tracks every socket in the operating system and can generate this data and relay it to an object store without incurring any additional cost.