There are only a couple timers you can adjust concerning netflow - at least in 12.2 code. 12.3 or 12.4 may be different - check the IOS context sensative help on your system.
ip flow-cache timeout inactive 10 ip flow-cache timeout active 1 There are several other settings I haven't had much use for -cache entries and such. Again, check your online help for info. Lastly, make certain "flow" switching is enabled on every interface - you can't just put it on one... I would compare the nTop overall stats with that reported by show int. I would also recommend validating the numbers using IPerf or similar tool and perhaps ftp and http downloads of known file sizes. From my experience it's pretty close - close enough. Also try running "show ip cache flow" and see if there's anything interesting in there. Gary >>> [EMAIL PROTECTED] 3/27/2006 8:35 AM >>> Hi there... I just started using Ntop recently and am having a hard time understanding the numbers that it is reporting. We have three cisco routers sending netflow data to our ntop box. Two 6509's and one 2821. They are the three core routers in our network (2 6509's for BGP upstream - 2821 for peering/downstream) The Ntop is only reporting peaks of 30-40Mb/s network load etc. and the amount of http traffic it's reporting is very low.... I presume this is something to do with the sampling rate in ntop OR could it be a config option on the 6509 side?? Just looking for a little guideance... thanks...;) Paul Stewart IP Routing/Switching Nexicom Inc. http://www.nexicom.net/ _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
