haina tang wrote: > I use flowscan and flow-tools to analysis our traffic. The traffic from one > router is about 2Gbps. what kind of machine is needed to monitor the traffic? >Dell xeon 6650 4cpu 8Gmem >or >Dell xeon 6650 2cpu 4Gmem > Can anyone help me with it? > > I only process from a couple OC-12-connected 7600s, churning about 7GB/day of flow records. For this I use a dual Xeon 2.4GHz w/ 1GB of RAM running Mandrake 10. However, what I have found as the biggest bottleneck is disk I/O, so I've done of lot with the disk subsystem. I use an Intel motherboard with builtin RAID, four 70GB 15kRPM spindles configured as RAID1+0. In this configuration, my CPU load is pegged at 0.00 nearly all the time. I also run some regular reporting, mostly a daily top-talkers kind of thing, which runs for about ten minutes for a day's summary.
I don't think the mulit-CPU helps you with flow-capture per se, but if you do anything else on the box (e.g. my reporting), it is nice to know that flow-capture will not be affected by it. Hope this helps. --ckg -- Clark Gaylord Communications Research Engineer Virginia Tech [EMAIL PROTECTED] "They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety." - Benjamin Franklin, Historical Review of Pennsylvania, 1759 _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
