If the probe is doing sampling, you can have pmacct re-normalize sampling via either a static sampling value, or via the flow/ipfix information that tells it how it was sampled..
sample_rate: <fixed sample rate> sample_map: <per-host sample rate map file> (s|n|p|u)facctd_renormalize:true If you're using a tap that samples traffic, you can tell the daemon that upstream traffic is sampled by X: pmacctd_ext_sampling_rate | uacctd_ext_sampling_rate http://wiki.pmacct.net/OfficialConfigKeys -- Tim On Wed, Aug 24, 2016 at 9:37 AM, Stephen Clark <sclar...@earthlink.net> wrote: > Hi Paolo, > > I looked thru the CONFIG_KEYS and didn't find the ability to do sampling > except > in the SQL_preprocess keys. Is it possible to do the sampling at the point > the neflow records are first created - in other words by nfprobe? > > Thanks, > Steve > > -- > > "They that give up essential liberty to obtain temporary safety, > deserve neither liberty nor safety." (Ben Franklin) > > "The course of history shows that as a government grows, liberty > decreases." (Thomas Jefferson) > > > > _______________________________________________ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists >
_______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists