Re: [Nfsen-discuss] big netflow data analisis with nfsen

2018-08-21 Thread Leandro
Ok , please confirm:     your pps = 1Mp/s are inpunt paquets at the nfsen server interface (meassured with snmp counters). and the flows = 50k/s ? are those related to main router and meassured at nfsen tool ? Regards. Leandro. Packets: ~1Mp/s On 21/08/18 10:39, Jens Hektor wrote: Am

Re: [Nfsen-discuss] big netflow data analisis with nfsen

2018-08-21 Thread Jens Hektor
Am 21.08.18 um 14:56 schrieb Leandro: > Which is your sample rate ? Our routers do not allow 1:1 sampling anymore so we take the data from a SPAN port and convert them to netflow sending it to the nfsen machine. I am through with yaf, yaf2 and pmacctd, at the moment softflowd seems to work best.

[Nfsen-discuss] big netflow data analisis with nfsen

2018-08-21 Thread Jens Hektor
What counts are the flows you have, not the bandwidth. Here are some numbers of our university uplink, to give you a feeling: Flows: ~50k/s in, the same out Packets: ~1Mp/s in, the same out Bits: typically 10-20 Gbit/s in, ~5Gbits/ out This gives me ~500GByte/d But remember: the used disk

Re: [Nfsen-discuss] big netflow data analisis with nfsen

2018-08-21 Thread Leandro
Alan I would like to use 1:1 if possible ... what do you think ? Leandro. On 18/08/18 17:23, Alan Whinery wrote: What netflow sampling ratio are you going to use? On 8/17/2018 8:20 AM, Leandro wrote: Hi guys, I would like your advice about dimensioning my netflow server. I had great