FloCon is an open workshop that provides a forum for operational analysts, tool developers and other parties interested in the analysis of large volumes of traffic to showcase the next generation of flow-based analysis techniques. Flow is an abstraction of network traffic in which packets are grouped together by common attributes over time. In security, flow has been used to survey and analyze large networks and long periods of time, as well as to provide a retrospective view of network activity for incident handling.