How many days of Network Forensics storage will the LANGuardian database store?

  • 1
  • Idea
  • Updated 4 years ago
The total number of days’ worth of live data that the LANGuardian database will store differs for every implementation. The LANGuardian database can grow, restricted only by the disk space available. Automatic and manual archiving ensures you never run out of space to capture new events.

As we do not keep every packet, but use our application decoders to fingerprint, reassemble and extract/store only the critical detail, we are able to retain rich granular data very cost effectively and for weeks, not days.

As you can see from this example, one months’ worth of data is an amount easily met or surpassed by existing customers. This means that you have all data available 30 days back for historical reporting on security, user, network and Internet related events.

Once data is recorded by LANGuardian, it it not modified until it gets archived/removed. So you can get the same level of detail for the oldest data (e.g. last month ), as you do for the most recent data (e.g. last 1 hour).

​The amount of data you can store depends on a number of factors including:
  • Volumes of traffic and the number of events that are recorded
  • Types of traffic / diversity of protocols
  • Optional modules/application decoders enabled for each sensor
To figure out how much space is currently being utilized by your LANGuardian and the length of time you keep data for, go to https://x.x.x.x/sysadm/dbstatus.cgi
Photo of Aisling Brennan

Aisling Brennan, Official Rep

  • 393 Posts
  • 8 Reply Likes

Posted 4 years ago

  • 1

Be the first to post a reply!