Dear all, thanks for your comments. I think the netflow configuration from my router lets flows last more than 5 minutes, so I have spikes in my graphs as you said.
This is my netflow router config, please can you tell me if you can see the flow timeout value in order to adjust it??? #sh ip flow export template Template Options Flag = 0 Total number of Templates added = 1 Total active Templates = 0 Flow Templates active = 0 Flow Templates added = 0 Option Templates active = 0 Option Templates added = 1 Template ager polls = 0 Option Template ager polls = 38535501 Main cache version 9 export is enabled Template export information Template timeout = 30 Template refresh rate = 20 Option export information Option timeout = 30 Option refresh rate = 20 #sh ip cache flow IP packet size distribution (107758M total packets): IP Flow Switching Cache, 0 bytes 3773 active, 196227 inactive, 1293394830 added 52708905 ager polls, 0 flow alloc failures Active flows timeout in 30 minutes Inactive flows timeout in 15 seconds last clearing of statistics never El mar., 21 abr. 2020 a las 6:09, Giles Coochey (<gi...@coochey.net>) escribió: > > On 21/04/2020 08:59, Adrian Popa wrote: > > *2020-04-20 21:26:02.872 1546.520 UDP 200.41.181.78:1194 > <https://netflow.sintys.gob.ar/nfsen.php#null> <-> 181.166.177.133:1194 > <https://netflow.sintys.gob.ar/nfsen.php#null> 0 213368 0 > 125.1 M 2 > > * > > This is the port used by OpenVPN. If most of your traffic is tunnelled via > OpenVPN you won't see the individual flows inside that VPN. > > If you don't timeout flows every five minutes or so, this flow will only > show up in your graphs when the flow ends. > > -- > Giles Coochey > > _______________________________________________ > Nfsen-discuss mailing list > Nfsen-discuss@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/nfsen-discuss >
_______________________________________________ Nfsen-discuss mailing list Nfsen-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
