Keyboard shortcuts

Press or to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

Data Collection and Storage Requirements

Ridgeback is designed to analyze network traffic metadata, ensuring user privacy by not examining or storing the actual content of network traffic. This approach allows organizations to gain insights into network behavior while maintaining data security and confidentiality.

Data Volume Per Endpoint

Ridgeback collects approximately 200 bytes of metadata per network event. The volume of collected data can be summarized as follows:

  • Average Collection Rate: ~10 network events per endpoint per minute
  • Daily Data Volume: ~14,400 network events per endpoint, totaling ~2.88MB per day
  • Monthly Data Volume: ~86.4MB per endpoint

Data Volume for a Subnet (/24)

For a fully loaded /24 subnet (nominally 254 endpoints), the data storage requirements scale as follows:

  • Monthly Data Estimate: ~22.118GB
  • Conservative Storage Requirement: 25GB per /24 subnet, per month

These figures provide a conservative estimate for organizations planning data storage and infrastructure capacity to support Ridgeback's network traffic metadata analysis.