For example, if the HTTP protocol is present, sFlow will guarantee data confidentiality since it will not extract the information from the packet and will not collect all network sessions. The information details taken from the packet are the headers from Layer 3 and 4 and some information about the upper layers’ data only. It’s a packet sampling for an N number of packets with all required statistical information and expedited to the destination collector. It provides the means for exporting truncated packets, together with interface counters. sFlow, short for “sampled flow”, is an industry-standard for packet export at Layer 2 of the OSI model. org Consortium, this protocol is supported by a wide range of network devices, as well as routing software and network solutions. SFlow (6343 port) is a protocol designed for monitoring network, wireless and host devices. It processes the most common types of Flow: NetFlow, sFlow, J-Flow, IPFIX, NetStream. It receives, analyzes, and processes all traffic transiting the network and transfers data in a compatible mode to NFA Databases – MySQL and ClickHouse. The collector is one of NFA’s most important components. It offers a comprehensive set of reports, graphs and flows information that can reflect the current and historical state of a network. Broker is used for communication between the NFA components.įrontend represents a complex browser application that interacts with NFAAPId. NFAalertd is used to detect and generate alerts based on the alert settings set by the end-user. NFAaggd periodically aggregates flow data that is stored in the database and flushes data according to the configuration parameters. NFApushd is used to send notifications and alerts to the end-users. NFABGPd stores and keeps all routes and adds AS Path to traffic flow. The token is passed as a query parameter for all API requests that require authentication. NFA API uses an authentication mechanism based on authentication tokens. Access NFA’s frontend to manage users or configure external User Directories. A valid NFA user-id is required to access most of the API services. NFAAPId represents a set of secure web services that collect data from Databases. Collector (NFAflowd) receives, analyzes, and processes all traffic transiting a network.ĭatabases NFA uses two databases: MySQL (configuration) and ClickHouse (Data Mart), that act relating to the central repository which stores processing results.
0 Comments
Leave a Reply. |