"Robert Franklin" <rc...@cam.ac.uk> wrote: > I've not measured this exactly but our Netflow collectors (running nfcapd) > are recording about 80-100,000 flows > per second across about 17 routers and 2 Cisco ASAs with NFSen. That's just > over 50M flows per 10 minute file - > each about 1.2GB in size.
Sounds good. Are you doing full Netflow export, or have the routers doing sampling and export sampled flows? In our case, ATM and GigE interfaces are exporting sampled flows. Which messes around byte volumes when comparing with other data sets. But our network guys are telling me it burns too much router CPU having these interfaces do full flow exporting of traffic routed. > The load average is about 5% on these machines and I've never had any reports > of IO problems - the disks are > normal spinning hard disks (not SSDs) and just write the data to linear > files: they're copied off elsewhere > to be analysed. Sounds even better. Got brand new HP (1RU) servers with plenty of RAM. And have the same approach. Collector server only collects data - files are shipped to a db cluster for data loading and crunching. Thanks for the quick response Bob - much appreciated. regards, Billy ------------------------------------------------------------------------------ Site24x7 APM Insight: Get Deep Visibility into Application Performance APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month Monitor end-to-end web transactions and take corrective actions now Troubleshoot faster and improve end-user experience. Signup Now! http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140 _______________________________________________ Nfdump-discuss mailing list Nfdump-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
