Flow data is already generated by most network devices. There has always been sufficient justification to collect and look at flow data if only to get a picture of what your network is being used for.