> > Once per hour, I'm getting a large volume of syslogs that look
> > thusly (it's a lot more readable if you can stretch your window
> > out to about 200 columns):
> 
> Are you sure you're not simply seeing the effects of some kind of per-hour
> Unix cron job which involves a lot of disk activity, thus starving the
> flow-capture process of disk IO, resulting in lost flows?

Yes, I'm sure.  Nothing else running from cron to speak of, and I'm
running the capture as a realtime process.  What leads me to suspect
a bug is that all the entries for a given exporter show the same number 
of total flows and lost flows, with the pkts counter incrementing by 
one for each entry.  

Thanks for the response,
mb
_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools

Reply via email to