The collector needs to "do something" with the data.
On Windows, the primary challenges are:
| Collector | Flows/sec | CPU usage (%) | RAM usage (GB) | Packet loss (%) | |-----------|-----------|---------------|----------------|------------------| | PRTG | 5,000 | 12 | 1.2 | 0.0 | | PRTG | 15,000 | 38 | 3.1 | 1.2 | | Scrutinizer | 5,000 | 8 | 2.0 | 0.0 | | Scrutinizer | 20,000 | 29 | 4.8 | 0.5 | | Elastiflow (WSL2) | 5,000 | 6 (WSL) + 2 (host) | 3.5 | 0.0 | | Elastiflow (WSL2) | 25,000 | 18 (WSL) + 4 (host) | 7.2 | 0.8 | netflow collector windows
The problem addressed by this paper is the perceived lack of guidance on running NetFlow collectors effectively on Windows. The objectives are: The collector needs to "do something" with the data