Hi,
I found flowscan+Cuflow will generate wrong graph with sampled netflow data from cisco GSR export. In my situation, I set up netflow sampling on GSR Gigaethernet interface by: ============================ ip flow-sampling-mode packet-interval 500 interface GigabitEthernet7/1 description Egress ip address *.*.*.* 255.255.255.252 ip route-cache flow sampled no ip directed-broadcast negotiation auto ======================== Also, I set up Juniper M160 forward sampling with sampling rate of 500. In CUFlow.cf, I do: ================= SampleRate *.*.*.2 500 ============= also I set up some special network I'm very interested in as: =========== Network *.*.*.33/27,*.*.*.65/29 MAN-DNS Network 80.160.91.5/32,80.160.91.13/32 Skype-server ============= When three router start sending netflow data to the collector, flowscan is invoked to process those data files. The problem is, when I select to graph only GSR data, data on the graph shows about 10Gbps-out with 2Gbps-in. I only enable netflow on two Giga ethernet interface on that GSR! While graphing data from M160, it only shows 200Mbps on both direction while only 2.5Gbps POS interface are monitored! Another problem, CUGrapher.pl could not show up Network name on web page ( it left it blank ). Why ? How can i calc. sampled data ? how could it work correctly? thanks -- -- -- Regards Joe Shen ****************************************** * The sunshine of lifetime is made up of * * little beams which is bright all the * * time. * ****************************************** _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
