Hi all,
Congrats for the new Forum and my first Question is
What is the Purpose of Data Collapsing Netflow Traffic Analyzer
Thanks and Regards
The purpose of data collapse is to compress data as it gets older. As data gets older you lose some granularity (was that packet sent at 12:01 or 12:00), but you retain the important information (how much data, ports, endpoints, etc.). Data collapsing (or compression as we are now calling it) allows you to keep your traffic analysis data much longer, while taking much less storage space, than you could if the data were not compressed.
You have control over how long to keep compressed data and uncompressed data. By default we keep uncompressed data for 1 hour and compressed data for 90 days.
Hope that answers your question.
Dear David,
Thanks for answers, and that's exactly what I want
Thanks again
Hi all..this information was very good..but I want to ask a question about the intervals that netflow do for collapsing or retaining..I didn't understand these options..like 15 min ..intervals..it the information older or..something I didn't get it..so if one have a good information about it please help
The NetFlow protocol produces an enormous amount of data. We compress the data by combining records with the time period that are identical. If we didn't, your database would get very large very quickly.
please can u give me an example about these options..retaining and collapsing data..and what option should I use if i want to do that..btw I have three options to do that..what is the difference between them..Thanks
You have only 2 options. How long to keep compressed data, which you should keep as long as you want to be able to look back. Keeping uncompressed data. The default is an hour, and that should work for almost everyone.
