Re: [Nfsen-discuss] Nfsen traffic curve is not similar to SNMP traffic curve

2020-04-21 Thread Adrian Popa
Netflow and SNMP measure two different things. SNMP measures layer2 traffic with precision, while netflow measures layer3 traffic (mostly IPv4) without precision. The precision loss is due to: * sampling (maybe it's off for you) * flow expire timers (a long-lasting flow - e.g. that lasts for

Re: [Nfsen-discuss] Nfsen traffic curve is not similar to SNMP traffic curve

2020-04-21 Thread Giles Coochey
On 21/04/2020 08:59, Adrian Popa wrote: *2020-04-20 21:26:02.872 1546.520 UDP 200.41.181.78:1194 <-> 181.166.177.133:1194 0 213368 0 125.1 M 2 * This is the port used by OpenVPN. If most of your

Re: [Nfsen-discuss] Nfsen traffic curve is not similar to SNMP traffic curve

2020-04-21 Thread Adrian Popa
*2020-04-20 21:26:02.872 1546.520 UDP 200.41.181.78:1194 <-> 181.166.177.133:1194 0 2133680 125.1 M 2* This looks like a long-lasting openvpn session. You need to force your

Re: [Nfsen-discuss] Nfsen traffic curve is not similar to SNMP traffic curve

2020-04-21 Thread Roberto Carna
Dear all, thanks for your comments. I think the netflow configuration from my router lets flows last more than 5 minutes, so I have spikes in my graphs as you said. This is my netflow router config, please can you tell me if you can see the flow timeout value in order to adjust it??? #sh ip flow

Re: [Nfsen-discuss] Nfsen traffic curve is not similar to SNMP traffic curve

2020-04-21 Thread Giles Coochey
This might help: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/netflow/configuration/xe-16/nf-xe-16-book/nflow-filt-samp-traff-xe.html#GUID-811CA1DB-CFBF-4656-BD9E-12F47AF5FFD3 or if using Flexible netflow

Re: [Nfsen-discuss] Nfsen traffic curve is not similar to SNMP traffic curve

2020-04-21 Thread Giles Coochey
On 21/04/2020 14:09, Roberto Carna wrote: Dear all, thanks for your comments. I think the netflow configuration from my router lets flows last more than 5 minutes, so I have spikes in my graphs as you said. This is my netflow router config, please can you tell me if you can see the flow

Re: [Nfsen-discuss] Nfsen traffic curve is not similar to SNMP traffic curve

2020-04-21 Thread Roberto Carna
OK, I understandlet me ask you a lst question please: Where should I configure the sampling time in nfsen? I mean the frequency that nfsen writes the flow data in the graphs. Thanks a lot again!!! El mar., 21 abr. 2020 a las 10:37, Giles Coochey () escribió: > On 21/04/2020 14:09, Roberto

Re: [Nfsen-discuss] Nfsen traffic curve is not similar to SNMP traffic curve

2020-04-21 Thread Roberto Carna
Hi Giles, I'll read them right now. But from nfsen side, is it possible to change 5 minutes cycle time to a lower value, let's say 1 minute ??? I mean the interval that Nfsen writes the data to the graphs. Thanks again, regards !!! El mar., 21 abr. 2020 a las 10:57, Giles Coochey () escribió:

Re: [Nfsen-discuss] Nfsen traffic curve is not similar to SNMP traffic curve

2020-04-21 Thread Giles Coochey
On 21/04/2020 15:45, Roberto Carna wrote: Hi Giles, I'll read them right now. But from nfsen side, is it possible to change 5 minutes cycle time to a lower value, let's say 1 minute ??? I mean the interval that Nfsen writes the data to the graphs. Thanks again, regards !!! It needs to

Re: [Nfsen-discuss] Nfsen traffic curve is not similar to SNMP traffic curve

2020-04-21 Thread Roberto Carna
Thanks a lot to all of you. Regards!!! El mar., 21 abr. 2020 a las 12:06, Giles Coochey () escribió: > > On 21/04/2020 15:45, Roberto Carna wrote: > > Hi Giles, I'll read them right now. > > > > But from nfsen side, is it possible to change 5 minutes cycle time to > > a lower value, let's say 1