Settings

Default configuration can be changed via environment variables in /srv/collector/.env file (learn more).

Flow Collection

IPv4

  • COLLECTOR_NETFLOW_V5_PORT (default: 9555): the port used to receive NetFlow v5 protocol packets.
  • COLLECTOR_NETFLOW_V9_PORT (defalt: 9995): the port used to receive NetFlow v9 protocol packets.
  • COLLECTOR_IPFIX_UDP_PORT (default: 4739): the port used to receive IPFIX protocol packets over UDP.
  • COLLECTOR_IPFIX_TCP_PORT (default: 4739): the port used to receive IPFIX protocol packets over TCP.
  • COLLECTOR_SFLOW_PORT (default: 6343): the port used to receive sFlow v5 protocol packets.

IPv6

Ports for IPv6 traffic are set automatically to one above than the port for IPv4. For example, port 9556 will be used for NetFlow v5 over IPv6.

ClickHouse

Collector saves flow from incoming packets to ClickHouse located using:

  • COLLECTOR_CLICKHOUSE_ADDRESS (default: clickhouse.mitigator:9000): address and port of the ClickHouse server.

MITIGATOR Integration

Grafana

Grafana is used to display the metrics gathered by Collector. Grafana runs on port 3000, which can be accessed via a browser.

Default login/password: admin/admin.

At the first launch, select Data Sources, then select Collector.