Ok , please confirm:
your pps = 1Mp/s are inpunt paquets at the nfsen server interface
(meassured with snmp counters).
and the flows = 50k/s ? are those related to main router and meassured
at nfsen tool ?
Regards.
Leandro.
Packets: ~1Mp/s
On 21/08/18 10:39, Jens Hektor wrote:
Am 21.08.18 um 14:56 schrieb Leandro:
Which is your sample rate ?
Our routers do not allow 1:1 sampling anymore so
we take the data from a SPAN port and convert them to
netflow sending it to the nfsen machine.
I am through with yaf, yaf2 and pmacctd, at the moment
softflowd seems to work best.
About your numbers:
Where are those measured ? (collector or exporter interface ?)
The are quite consistent with the SNMP interface data
and I looked the numbers up from nfsen.
It is a little bit confusing , if you have 1Mp/s how do you reach
10-20Gbps ?
The people who need really high performance run MTU 9000.
Usually the HPC group and the physicists communicating with CERN.
Witch of them (flow , traffic , packets ) are sample rate depending ?
Don't know. I you have a fair mix of traffic than the
estimation of transferred traffic should be ok.
In a sampled situation I would rely on SNMP interface counters.
Here mines:
Currently I have: (maximun).
Flows 2.4k
Traffic : 28 Gbps.
Packets: 4Mp/s
sample rate: 512.
Regards.
Leandro.
btw / I have an error at the beggining of the email at the requierements , it
should be 50gbps when it says
15~25Gbps total traffic.
What counts are the flows you have, not the bandwidth.
Here are some numbers of our university uplink,
to give you a feeling:
Flows: ~50k/s in, the same out
Packets: ~1Mp/s in, the same out
Bits: typically 10-20 Gbit/s in, ~5Gbits/ out
This gives me ~500GByte/d
But remember: the used disk space depends only on the number of flows.
Am 21.08.18 um 13:09 schrieb Leandro:
Alan I would like to use 1:1 if possible ... what do you think ?
Leandro.
On 18/08/18 17:23, Alan Whinery wrote:
What netflow sampling ratio are you going to use?
On 8/17/2018 8:20 AM, Leandro wrote:
Hi guys, I would like your advice about dimensioning my netflow server.
I had great expierence using nfsen + nfcap + nfdump on small traffic
network.
I m evaluating to take it to a bigger project with the following
requirements:
netflow version 9 gathered from cisco device.
15~25Gbps total traffic.
1 month of live profile historic to analize.
AS information from bgp protocol.
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
