This might help:
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/netflow/configuration/xe-16/nf-xe-16-book/nflow-filt-samp-traff-xe.html#GUID-811CA1DB-CFBF-4656-BD9E-12F47AF5FFD3
or if using Flexible netflow
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/fnetflow/configuration/15-mt/fnf-15-mt-book/use-fnflow-redce-cpu.html#GUID-7B2222C9-0C2C-4A11-912B-B844F4A43C58
If you are not using Cisco, but your software emulates the cisco type
configuration methods, then the above may still apply.
On 21/04/2020 14:46, Roberto Carna wrote:
OK, I understand....let me ask you a lst question please:
Where should I configure the sampling time in nfsen? I mean the
frequency that nfsen writes the flow data in the graphs.
Thanks a lot again!!!
El mar., 21 abr. 2020 a las 10:37, Giles Coochey (<gi...@coochey.net
<mailto:gi...@coochey.net>>) escribió:
On 21/04/2020 14:09, Roberto Carna wrote:
Dear all, thanks for your comments. I think the
netflow configuration from my router lets flows last more than 5
minutes, so I have spikes in my graphs as you said.
This is my netflow router config, please can you tell me if you
can see the flow timeout value in order to adjust it???
#sh ip flow export template
Template Options Flag = 0
Total number of Templates added = 1
Total active Templates = 0
Flow Templates active = 0
Flow Templates added = 0
Option Templates active = 0
Option Templates added = 1
Template ager polls = 0
Option Template ager polls = 38535501
Main cache version 9 export is enabled
Template export information
Template timeout = 30
Template refresh rate = 20
Option export information
Option timeout = 30
Option refresh rate = 20
#sh ip cache flow IP packet size distribution (107758M total
packets):
IP Flow Switching Cache, 0 bytes
3773 active, 196227 inactive, 1293394830 added
52708905 ager polls, 0 flow alloc failures
Active flows timeout in 30 minutes
Inactive flows timeout in 15 seconds
last clearing of statistics never
It does depend on (a) the version of software you are using and
(b) how you have chosen to configure Netflow.
For instance recently versions of Cisco IOS allow for configuring
Netflow as it used to be configured, or in a way known as
"Flexible Netflow".
Look for something like "ip flow-cache timeout active"
Or, if you have a section in your config called "flow monitor"
look to add "cache timeout active" to that section.
Best to check the documentation for your router, it should be
documented there.
--
Giles Coochey
_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
<mailto:Nfsen-discuss@lists.sourceforge.net>
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
--
Giles Coochey
_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
