I work for an isp and have been running flow-tools for about a week now, and everything is running great as far as graphing and toptalkers for 2 out of 4 routers so far. The "big" router peaks at 220 Mbits/sec on the downstream and the "small" one peaks just under 40 Mbits/sec on the downstream. The other two I will be adding will probably be somewhere near the smaller router as well.
My question is concerning the load on the server and how much you can do with flow-tools. The goal for us is to track usage for ALL users. we have a /16 net (65,025 ip addresses) and want to track at least total traffic per ip address, along with services and total for the routers. I am most interested to find out what others are using in terms of hardware, especially the use of ramdisks, and how many "Network" entries in the CUFlow.cf file. I was able to add about 2500 Network entries (individual ip's) in the CUFlow.cf file and that was about all it could take with my current setup (anyone out there running this on a super-badass server?). If anyone would like to respond with their specs/setup that would help tremendously: IBM x306 :Server (brand, model) 1 :# of cpu's 3.2 Ghz :cpu speed P4 :cpu type 512Mb :amount of mem SATA raid 0 :hdd(s) no :ramdisk flow-tools :collector cuflow :scanner JKGrapher.pl :front-end grapher 260/105 :total aprox. traff in bits down/up 2551 :total # of Network entries in CUFlow.cf 1.9G :du -h /var/netflow 65,000 :# of addresses in subnet Ben Martin [EMAIL PROTECTED] _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
