OK, I understand....let me ask you a lst question please: Where should I configure the sampling time in nfsen? I mean the frequency that nfsen writes the flow data in the graphs.
Thanks a lot again!!! El mar., 21 abr. 2020 a las 10:37, Giles Coochey (<gi...@coochey.net>) escribió: > On 21/04/2020 14:09, Roberto Carna wrote: > > Dear all, thanks for your comments. I think the netflow configuration from > my router lets flows last more than 5 minutes, so I have spikes in my > graphs as you said. > > This is my netflow router config, please can you tell me if you can see > the flow timeout value in order to adjust it??? > > #sh ip flow export template > Template Options Flag = 0 > Total number of Templates added = 1 > Total active Templates = 0 > Flow Templates active = 0 > Flow Templates added = 0 > Option Templates active = 0 > Option Templates added = 1 > Template ager polls = 0 > Option Template ager polls = 38535501 > Main cache version 9 export is enabled > Template export information > Template timeout = 30 > Template refresh rate = 20 > Option export information > Option timeout = 30 > Option refresh rate = 20 > #sh ip cache flow IP packet size distribution (107758M total packets): > IP Flow Switching Cache, 0 bytes > 3773 active, 196227 inactive, 1293394830 added > 52708905 ager polls, 0 flow alloc failures > Active flows timeout in 30 minutes > Inactive flows timeout in 15 seconds > last clearing of statistics never > > It does depend on (a) the version of software you are using and (b) how > you have chosen to configure Netflow. > > For instance recently versions of Cisco IOS allow for configuring Netflow > as it used to be configured, or in a way known as "Flexible Netflow". > > Look for something like "ip flow-cache timeout active" > > Or, if you have a section in your config called "flow monitor" look to add > "cache timeout active" to that section. > > Best to check the documentation for your router, it should be documented > there. > > -- > Giles Coochey > > _______________________________________________ > Nfsen-discuss mailing list > Nfsen-discuss@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/nfsen-discuss >
_______________________________________________ Nfsen-discuss mailing list Nfsen-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
