On Apr 11, 2005 7:14 PM, haina tang <[EMAIL PROTECTED]> wrote:
> hi All,
>    I use flowscan and flow-tools to analysis our traffic. The traffic from 
> one router is about 2Gbps. what kind of machine is needed to monitor the 
> traffic?
> Dell xeon 6650 4cpu 8Gmem
> or
> Dell xeon 6650 2cpu 4Gmem
>    Can anyone help me with it?

Hello haina,

We process flows from up to 10Gbps with a dual processor PPro 1Ghz w/
1GB of RAM.

The dual xeon configuration should be sufficient if I understand correctly
that you have flows for 2Gbps of bandwidth usage, not 2Gbps of flow
data coming to your analysis machine.  However,  I suggest that
you get as much RAM as possible.  Perhaps, 8GB in the 2 CPU 
configuration.

Our bottlenecks are:
    - The amount of RAM we have
    - The speed of our disks
    - The speed of our RAM

We only see 20%-40% CPU usage on the machine when running a 
flow-tools analysis.  We plan to upgrade our server with more memory.

flow-tools uses mmap to read large files, so more physical memory 
will reduce the amount of I/O wait time allowing the process to become
CPU bound rather than I/O bound.

If you do not mind IBM hardware, I recommend e-TechServices.com, Inc.
( http://www.e-techservices.com/ )  We buy our hardware from them, and
they help us with any sizing and configuration questions that we have.

I hope that my message has been helpful.


Thanks,

      - VAB
-- 
V. Alex Brennen      [EMAIL PROTECTED]
       http://cryptnet.net/people/vab/
_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools

Reply via email to