What is the best way to collect connection statistics between 50+ servers?

Question

linux

there are 50+ linux servers that
need to be analyzed within 3 days, what connections between them arise,
for example, server 10.0.0.1 connected to server 10.0.0.2:80 via tcp 8000 times in 2 days
Please tell me a way to collect statistics and perform subsequent analysis

Answer 1

in iptables log the facts of establishing connections (something like description_of_what_we_consider_established_connection -j LOG --log-prefix "Connection established"). Collect data from all servers using Filebeat in ELK (Elasticsearch + Logstash + Kibana) for further analysis and visualization.

Answer 2

Set up NetFlow on the network equipment between servers.
NetFlow for three days, you can take a trial.