Nick Cutting wrote:
> The main SFlow collection point(s) are 36 port 100g nexus 9236c, so I
> think it is based on different chipsets – ASE2
Right, I missed it was a different asic. You should reach out to your
SE and ask her/him if there is any way of poking this in hardware, in
the same way
...@foobar.org]
Sent: Monday, August 28, 2017 5:26 PM
To: Nick Cutting <ncutt...@edgetg.com>
Cc: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] nfSen / nfDump
This message originated from outside your organization
Nick Cutting wrote:
> I didn’t seem to be able to use that command on a N
Nick Cutting wrote:
> I didn’t seem to be able to use that command on a Nexus 9200 - the
> guide for the shell seems for the 9500 and the 3k?
N9K access instructions here:
>
-
From: Nick Hilliard [mailto:n...@foobar.org]
Sent: Monday, August 28, 2017 5:13 PM
To: Nick Cutting <ncutt...@edgetg.com>
Cc: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] nfSen / nfDump
This message originated from outside your organization
Nick Cutting wrote:
> Doesn't look like sfl
Nick Cutting wrote:
> Doesn't look like sflow daemon supports the -s sampling tag.
>
> %sources = (
> 'myRouter' => { 'port' => '9901', 'col' => '#00ff00', 'type' =>
> 'netflow', 'optarg' => ' -s -1000 '},
> );
yes, that's correct. The sflow sampling rate is specified in each sflow
Nick Cutting wrote:
> sflow sampling-rate 4096 <-- this is 512?
that means that out of every 4096 packets received on an interface, one
will be punted to the sflow collector. You can check the hardware
sampling rate using the PortSampRate command in the broadcom shell, like
this:
> n3k# test
This was an example I took from the nfsen forums - it is a negative value.
-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Justin
M. Streiner
Sent: Monday, August 28, 2017 3:32 PM
To: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] nfSen / nfDump
nsp-boun...@puck.nether.net] On Behalf Of Aaron
Gould
Sent: Sunday, August 6, 2017 1:46 AM
To: 'Phil Mayers' <p.may...@imperial.ac.uk>; cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] nfSen / nfDump
netflow
-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether
mperial.ac.uk>; cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] nfSen / nfDump
netflow
-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Phil
Mayers
Sent: Friday, August 4, 2017 3:08 AM
To: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] nfSen / n
You may want to checkout ntopng/nprobe if you haven't already. Depending on
the number of flows and features you need you may be able to use the
community/trial versions. If not I think the price is very reasonable for
what you get. (under $1k euro for both per year).
I got tired of having to
netflow
-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Phil
Mayers
Sent: Friday, August 4, 2017 3:08 AM
To: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] nfSen / nfDump
On 03/08/17 22:53, Aaron Gould wrote:
> I do 1/512 sample rate on
On 03/08/17 22:53, Aaron Gould wrote:
I do 1/512 sample rate on my asr9k's and usually multiple numbers gathered
in nfsen by 512 to normalize
sflow? Or netflow?
___
cisco-nsp mailing list cisco-nsp@puck.nether.net
We run Nfsen 1.3.6
- Aaron
-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Nick
Cutting
Sent: Tuesday, August 1, 2017 4:00 PM
To: cisco-nsp@puck.nether.net
Subject: [c-nsp] nfSen / nfDump
Slightly off topic, however related to the solarwinds
utt...@edgetg.com>
Cc: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] nfSen / nfDump
Nick,
Nfsen/nfdump is pretty rock solid. I've been running it for many years
without too many dramas. I use a combination of sflow / netflow within our
network. The only issue I have is it seems to incorrectly show
Nick,
Nfsen/nfdump is pretty rock solid. I've been running it for many years
without too many dramas. I use a combination of sflow / netflow within our
network. The only issue I have is it seems to incorrectly show packet
rate for sflow but is fine with netflow (due to the 1 in 1024 sample
Slightly off topic, however related to the solarwinds talks of last week.
Just wondering what versions of nfSen and nfdump you fine people are running -
and on what operating system, e.g debian / red hat etc.
I understand Nfsen has not been updated since 2011 - is this a problem - or is
it
16 matches
Mail list logo
