-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi Maurizio,
- --On February 19, 2008 12:35:24 +0000 Maurizio Molina <[EMAIL PROTECTED]>
wrote:
| Hi again,
| I'm starting to suspect that the occasional flow losses I'm seeing in
| nfsen are caused by the flow-tools flow-fanout that I placed in front of
| nfcapd. Actually, my (average) flow rate into the collector is around
| 1Mbit/s (but flows come in big bursts...), and then I had 5 internal
| fanouts on the loopback interface (so 6 Mbit/s of traffic to handle).
| Now I removed three of these five fanouts, and I'll see how it goes.
|
| Can I ask the list:
|
| 1) if anybody using flow-fanout to duplicate flows before nfcapd had
| ever noted flow losses because of it
| 2) are there other flow fan-out tools that can be used? how do they
| perform? (e.g. what about samplicator? will it support v9?)
With nfcapd, you can daisy-chain a netflow stream. Using -R to repeat
the received UDP packet to another host. The additional args ( -R )
for nfcapd can be specified in the %sources array as 'optarg'
samplicator itself works fine too. As it works on UDP packet level, the
netflow version is not relevant. ( as it is not for -R with nfcapd )
Use nfcapd for simple daisy-chains and samplicator, if you need more than
a single repeated stream.
- Peter
|
| Thanks,
| Maurizio
|
|
| -------------------------------------------------------------------------
| This SF.net email is sponsored by: Microsoft
| Defy all challenges. Microsoft(R) Visual Studio 2008.
| http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
| _______________________________________________
| Nfsen-discuss mailing list
| [email protected]
| https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag, Security Engineer, Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7
SWITCH, Werdstrasse 2, P.O. Box, CH-8021 Zurich, Switzerland
E-mail: [EMAIL PROTECTED] Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (Darwin)
iQCVAwUBR7rRif5AbZRALNr/AQI4tAQAh7Wlich6lgShcM4IOnA8DUZ6IlKfpirZ
89kmYDojG9ajl73bMS1eWAUEzLeLZiqwuVZYOYtSbon3CMlMbMLl9VgLzTwli5Sa
2dTgfKqMQQlgawIjMbqDcyV59UdqyzRBQ2h6riZsboMmRqArAaiHLur9yFU2c62/
nIhLDu9qrcY=
=PQlR
-----END PGP SIGNATURE-----
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
