If you have an environment using physical servers there are two ways for Faddom to receive the network traffic data -
- Enable NetFlow/sFlow on your network devices (switches/routers/firewalls) using the Faddom server as the collector. If it is already in use you can use port mirroring to send the data. For guidance on doing this, you should refer to the documentation for your device(s).
You can see the below articles for the recommended settings and supported versions
Recommended NetFlow/IPFix Settings
Recommended sFlow settings - If for some reason, you are unable to use the above method, you can install the sFlow agent to capture the traffic directly from the server(s). For details on how to do this, please follow our Capturing network traffic using agents
Comments