[email protected] wrote on 01/29/2011 03:46:05 PM:
> Math seems sound.
>
> 300 seconds is a function of exporter interval and collector file
> rotation. Most flows are shorter. Some will be longer if the
> exporter interval (active flow timeout) isn't configured properly.
>
> It's safe to use 300 if you only care about aggregate flow data and
> the exporter config is good.
>
> But, I think it's better to use start/end time to determine each
> flow's length. More detail at http://wvnetflow.sourceforge.net/#key-time
>
> -Craig
I agree with Craig on using individual flow time lengths.
I would also note that this is a total of all flows collected. Depending
on how many interface you are collecting from, the "per-interface" rates
are a subset of this number.
Joe
_______________________________________________
Flow-tools mailing list
[email protected]
http://mailman.splintered.net/mailman/listinfo/flow-tools
