It might not be a rate problem but it might be a scaling problem. Remember the NFSEN tries to receive the sample rate in the packet but if it doesn’t for some reason it defaults to 1:1. Depending on your hardware you might want to run at 1:1 which works well in my case for example running inline sampling on some higher end Juniper hardware. (not sure your routing setup). You can pass the sampling scale as a parameter on each source which will probably help so if you have 512 set on the router make sure you manually match on the NFSEN config side.
On Aug 19, 2014, at 9:33 AM, Mathieu POUSSIN <mathieu.pous...@oxalide.com> wrote: > Looks like this was the issue... packets got up to 600Kpps. > > I'll see if I still have flats if I need to set the rate even higher. > > Thank you Jeroen ! :) > > -----Message d'origine----- > De : Mathieu POUSSIN [mailto:mathieu.pous...@oxalide.com] > Envoyé : mardi 19 août 2014 15:09 > À : Jeroen Massar; nfsen-discuss@lists.sourceforge.net > Objet : Re: [Nfsen-discuss] 100k packets/s per netflow peer ? > > I'm changing the sampling rate from 100 to 512 to see if I see any changes. > > -----Message d'origine----- > De : Jeroen Massar [mailto:jer...@massar.ch] Envoyé : mardi 19 août 2014 > 14:51 À : Mathieu POUSSIN; nfsen-discuss@lists.sourceforge.net > Objet : Re: [Nfsen-discuss] 100k packets/s per netflow peer ? > > On 2014-08-19 14:21, Mathieu POUSSIN wrote: >> Hello, >> >> >> >> I'm currently deploying nfsen on my network, and I have a strange >> issue, the flow graphs can't go higher than 100k packet/s per netflow peer. >> >> >> >> I have 2 hosts that reach this limit and I never get more than 200k >> packets/s on my graphs , here is a graph that shows the issue (CR3 and >> CR4 have almost no traffic) : > [..] >> Have you an idea of what could cause this issue ? > > Check for UDP buffer overflow and other such limits. > > Likely though this is your sending device, most very likely you are just > hitting the limits of your hardware. > > Check that sampling etc is not affecting this. > > Greets, > Jeroen > > > > ------------------------------------------------------------------------------ > _______________________________________________ > Nfsen-discuss mailing list > Nfsen-discuss@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/nfsen-discuss > > ------------------------------------------------------------------------------ > _______________________________________________ > Nfsen-discuss mailing list > Nfsen-discuss@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/nfsen-discuss ------------------------------------------------------------------------------ _______________________________________________ Nfsen-discuss mailing list Nfsen-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
