Having a little trouble with sample rates on netflow data from JUNOS;
forwarding-options {
sampling {
input {
family inet {
rate 2000;
run-length 4;
max-packets-per-second 5000;
}
}
output {
cflowd x.x.x.x {
port x;
source-address x.x.x.x;
version 5;
}
Nfcapd detects this as:
Nov 26 11:10:51 host nfcapd[28430]: Process_v5: New exporter: engine id
0, type 0, IP: <unknown>, Sampling Mode: 0, Sampling Interval: 2000
The run-length effectively means we have a sampling rate of 1in400.
Is there any way to over-ride this inferred sampling rate or would it be
possible to modify nfcapd to handle the run-rate?
--
Alistair Cockeram
------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Nfdump-discuss mailing list
Nfdump-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
