Hello, since last month I figured how to instruct the router to send the "template data" and "sampler-table" periodically so, "optarg -s 10" is no longer needed. Now the total bps and pps are presented OK, but "nfdump -T -n 10 -s record/bps -o extended" show some inflated results. We get speeds over 500Mb for flows with less than 100 packets and the sum of this flows exceeds the total bps.
Thank you for your previous answer. On 05/06/2016 01:19 PM, Peter Haag wrote: > Hi, > > On 04.03.16 21:15, Adrian Minta wrote: >> Hi, >> I am collecting sampled netflow v9 data from some cisco routers. >> Flows are collected with " 'optarg' => ' -s 10' " in order for the >> graphs to be accurate. > This means, you tell nfdump to apply sampling rate 10, if not announced by > the collector otherwise. > So it looks to me as your router sends unsampled flow data? > > - Peter > >> Unfortunately nfdump reports 10 time more pps and bps for each flow than >> the real value :( >> I tested this with nfdump-1.6.13 and nfdump-1.6.14~github and got the >> same results. >> >> Is there a way to fix this ? >> -- Best regards, Adrian Minta ------------------------------------------------------------------------------ Find and fix application performance issues faster with Applications Manager Applications Manager provides deep performance insights into multiple tiers of your business applications. It resolves application problems quickly and reduces your MTTR. Get your free trial! https://ad.doubleclick.net/ddm/clk/302982198;130105516;z _______________________________________________ Nfdump-discuss mailing list Nfdump-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
