On Feb 18, 2014, at 2:15 PM, Aaron <[email protected]> wrote:

> Usually nfsen seems to be pretty accurate, is there a reason for that ~40 
> gbps reading during that ntp attack ?

Have you set your active flow timer to 60s/1m, so as to avoid backlogged spikes?

-----------------------------------------------------------------------
Roland Dobbins <[email protected]> // <http://www.arbornetworks.com>

          Luck is the residue of opportunity and design.

                       -- John Milton


_______________________________________________
cisco-nsp mailing list  [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Reply via email to