Collector settings are the most important option. For each collector you must set up the listening port, number of tables that will be created and stored and the associated NDE device(s). This has to be set up on the unit (server) that you want run on the selected collector. Listening port will begin in an interval between 1024 and 65535. Commonly the used value for the listening port is 2000 and must correspond with a value configured on the NDE device. The number of tables depends on your disc space and incoming data flow. For example routers with ten 100Mbs interfaces and a 20GB disc, the optimal values: for hourly tables is 48, for daily tables 31, for weekly tables 4 and for monthly tables 3.
If the time between collector server and exporting device is unsynchronized, flows that contain the wrong time will be dropped (see the menu Status->Collectors and 'Dropped flows due to corrupted time' counters). You can correct the wrong time by changing the collector settings (option correct unsynchronized time). In most cases the source of the problem is a different/wrong time zone setting or wrong time set up on exporting device. The collector by itself analyzes each flow and if there is a difference between the flow time and the collector's time by more than 12 hours, the flow time is replaced by the collector's time.
It's possible to configure a forwarding list if you want to forward NDE to other destination(s). Before enabling the forward or filter feature, the forward or filter list must be defined via the Section 4.8, “Forwarding settings” or Section 4.9, “Filtering settings” menu. In case you want to resolve interface names it is important to associate a NDE device with the collector. Don't forget to enable the collector.
![]() | Warning |
---|---|
Some advanced settings can be configured only when you define a new collector! |
Please, read also Section 4.4.2, “Advanced collector settings”.