Hi all,
Congrats for the new Forum and my first Question is
What is the Purpose of Data Collapsing Netflow Traffic Analyzer
Thanks and Regards
The purpose of data collapse is to compress data as it gets older. As data gets older you lose some granularity (was that packet sent at 12:01 or 12:00), but you retain the important information (how much data, ports, endpoints, etc.). Data collapsing (or compression as we are now calling it) allows you to keep your traffic analysis data much longer, while taking much less storage space, than you could if the data were not compressed.
You have control over how long to keep compressed data and uncompressed data. By default we keep uncompressed data for 1 hour and compressed data for 90 days.
Hope that answers your question.
Dear David,
Thanks for answers, and that's exactly what I want
Thanks again
Hi all..this information was very good..but I want to ask a question about the intervals that netflow do for collapsing or retaining..I didn't understand these options..like 15 min ..intervals..it the information older or..something I didn't get it..so if one have a good information about it please help
The NetFlow protocol produces an enormous amount of data. We compress the data by combining records with the time period that are identical. If we didn't, your database would get very large very quickly.
