A is a central server (physical, virtual, or cloud-based) responsible for receiving, processing, and storing flow data exported by network devices.
: High-end collectors "enrich" flow data by mapping IP addresses to usernames (via Active Directory), identifying applications, or adding geographic location data to help identify the source of suspicious traffic. collector netflow
: Filters and reduces data volume before storing it in databases or flat files for historical review. A is a central server (physical, virtual, or
: To save disk space, collectors may aggregate data over time—for example, converting 1-minute granular data into 15-minute historical averages after a set period. Why You Need a Dedicated Collector A is a central server (physical