I am monitoring a link between two ISPs that has many src/dst pairs and runs about four mbits constantly. If either ISP's DS3 fails we expect to see twenty mbits on the link.
The current box doing the job is a 1.0 GHz Dell with 384 meg of ram and two 3com 905 ethernet boards. We see 70% utilization occuring pretty regularly, 350 meg of ram used, and consistently lose 20% of packets.
I think 3com cards are pretty wimpy - what would be better? Intel etherexpress? Some specialized card?
How much ram should I have given an anticipated 5x increase in total traffic and a probable 5x increase in src/dst pairs?
What sort of a processor will be required to keep up with this level of activity?
I expect to turn on netflow export from the router of the ISP who is hosting the box. What sort of resources will be required to support that? What happens if the other ISP wants to share the services of this box and it has to monitor netflow from two busy DS3s?
-- "Now my sails are filling, with winds so willing, and I'm as good as gone again" - Saint of Circumstance
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
