Am 21.08.18 um 14:56 schrieb Leandro: > Which is your sample rate ? Our routers do not allow 1:1 sampling anymore so we take the data from a SPAN port and convert them to netflow sending it to the nfsen machine.
I am through with yaf, yaf2 and pmacctd, at the moment softflowd seems to work best. > About your numbers: > Where are those measured ? (collector or exporter interface ?) The are quite consistent with the SNMP interface data and I looked the numbers up from nfsen. > It is a little bit confusing , if you have 1Mp/s how do you reach > 10-20Gbps ? The people who need really high performance run MTU 9000. Usually the HPC group and the physicists communicating with CERN. > Witch of them (flow , traffic , packets ) are sample rate depending ? Don't know. I you have a fair mix of traffic than the estimation of transferred traffic should be ok. In a sampled situation I would rely on SNMP interface counters. > Here mines: > Currently I have: (maximun). > > Flows 2.4k > Traffic : 28 Gbps. > Packets: 4Mp/s > sample rate: 512. > > Regards. > Leandro. > btw / I have an error at the beggining of the email at the requierements , it > should be 50gbps when it says > > 15~25Gbps total traffic. > > > >> What counts are the flows you have, not the bandwidth. >> >> Here are some numbers of our university uplink, >> to give you a feeling: >> >> Flows: ~50k/s in, the same out >> Packets: ~1Mp/s in, the same out >> Bits: typically 10-20 Gbit/s in, ~5Gbits/ out >> >> This gives me ~500GByte/d >> >> But remember: the used disk space depends only on the number of flows. >> >> Am 21.08.18 um 13:09 schrieb Leandro: >>> Alan I would like to use 1:1 if possible ... what do you think ? >>> Leandro. >>> >>> On 18/08/18 17:23, Alan Whinery wrote: >>>> What netflow sampling ratio are you going to use? >>>> >>>> >>>> On 8/17/2018 8:20 AM, Leandro wrote: >>>>> Hi guys, I would like your advice about dimensioning my netflow server. >>>>> I had great expierence using nfsen + nfcap + nfdump on small traffic >>>>> network. >>>>> I m evaluating to take it to a bigger project with the following >>>>> requirements: >>>>> >>>>> netflow version 9 gathered from cisco device. >>>>> 15~25Gbps total traffic. >>>>> 1 month of live profile historic to analize. >>>>> AS information from bgp protocol. >> > -- Dipl.-Phys. Jens Hektor, Networks IT Center, RWTH Aachen University Room 2.04, Wendlingweg 10, 52074 Aachen (Germany) Phone: +49 241 80 29206 - Fax: +49 241 80 22100 http://www.itc.rwth-aachen.de - hek...@itc.rwth-aachen.de
smime.p7s
Description: S/MIME Cryptographic Signature
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ Nfsen-discuss mailing list Nfsen-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
