Skip to content

Glossary: Logs and Data Sources for Investigations

Collector

Also written: flow collector

The system that receives flow records from exporters and stores them. In the lab this was nfcapd; IPFIX collectors listen on port 4739 by default.

Where the book teaches it

Related terms

ExporterAnalyzernfcapdIPFIX (Internet Protocol Flow Information Export)