If I disable sampling, I can see my HW counters dropping flows all over the
place and the graphs start to look real ugly like. 1:1 + drops is clearly not
in the cards ;)
On 2013-01-11, at 2:57 AM, Adrian Popa adrian.popa...@gmail.com wrote:
Is there a way to measure how many flows you are
Is there a way to measure how many flows you are dropping? Assuming you set
sampling to 1:1, the only indication I saw about hardware resources being
exhausted was (on a cisco box) getting syslog messages that the TCAM memory
was exhausted, but I didn't get any views on how many flows were being
Depending on what you want to use the netflow data for, sampling could be
low or high. Low sampling gives you more accurate data for a specific flow,
high sampling can give you some average data for the whole box. The more
details you want, the lower the sampling has to be.
Keep in mind one more
