Data Collection Parameters - Symantec 10521146 - Network Security 7120 Administration Manual

Data collection parameters

UDP Saturation Alert Threshold
■
IP Fragment Saturation Alert Threshold
■
Bad Service Saturation Alert Threshold
■
Other Saturation Alert Threshold
■
Event Delay Time
■
Traffic Mode
■
Enable IPv4 Header Checksum Validation
■
Enable TCP Checksum Validation
■
Enable UDP Checksum Validation
■
TCP 2MSL Timeout
■
TCP Default Window Size
■
The following parameters enable or disable the collection of data such as flow
statistics and full packet data. You can enable or disable these parameters on
each sensor individually to devote them to specific tasks.
Enable Flow Statistics Collection
Enable Flow Statistics Collection serves as the on/off switch that enables the
sensor to collect information about network flows.
The default value is false. If your system has performance issues, leaving Enable
Flow Statistics Collection turned off can provide a minor improvement. However,
some Symantec Network Security features use the data collected by this
parameter. For example, if you leave Enable Flow Statistics Collection off for all
sensors, FlowChaser will receive no flow data from sensors. If no routers collect
flow data either, FlowChaser will have nothing to query. However, you can
enable or disable the parameters on each sensor independently without
affecting the others.
Note: In previous versions, the default value was true.
See "Configuring FlowChaser"
Enable Full Packet Capture
Enable Full Packet Capture serves as the on/off switch that enables the sensor to
send full packet data with events, instead of sending only header packet data.
on page 220.
Detecting
Configuring sensor detection
163