On 21/04/2020 14:09, Roberto Carna wrote:
Dear all, thanks for your comments. I think the netflow configuration
from my router lets flows last more than 5 minutes, so I have spikes
in my graphs as you said.
This is my netflow router config, please can you tell me if you can
see the flow timeout value in order to adjust it???
#sh ip flow export template
Template Options Flag = 0
Total number of Templates added = 1
Total active Templates = 0
Flow Templates active = 0
Flow Templates added = 0
Option Templates active = 0
Option Templates added = 1
Template ager polls = 0
Option Template ager polls = 38535501
Main cache version 9 export is enabled
Template export information
Template timeout = 30
Template refresh rate = 20
Option export information
Option timeout = 30
Option refresh rate = 20
#sh ip cache flow IP packet size distribution (107758M total packets):
IP Flow Switching Cache, 0 bytes
3773 active, 196227 inactive, 1293394830 added
52708905 ager polls, 0 flow alloc failures
Active flows timeout in 30 minutes
Inactive flows timeout in 15 seconds
last clearing of statistics never
It does depend on (a) the version of software you are using and (b) how
you have chosen to configure Netflow.
For instance recently versions of Cisco IOS allow for configuring
Netflow as it used to be configured, or in a way known as "Flexible
Netflow".
Look for something like "ip flow-cache timeout active"
Or, if you have a section in your config called "flow monitor" look to
add "cache timeout active" to that section.
Best to check the documentation for your router, it should be documented
there.
--
Giles Coochey
_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
