Sorry for asking again this list for help, although it's not probably an nfcapd related issue. But perhaps somebody (specifically using Juniper) had similar problems?
I still have some periods where flow counts suddenly drop for some routers, although I switched off all the fanouts (now the 22 nfcapd processes directly listens to the GBE Physical interface of the worksatation - a Sunfire V40z). The average flow rate is 1-2 Mbit/s. the nfcapd buffer should be large enough: Feb 20 12:23:25 srv3 /opt/netflow/tools/nfdump/snpsht-20070312/bin/nfcapd[29102]: Standard setsockopt, SO_RCVBUF is 9000000 Requested length is 4194304 bytes Feb 20 12:23:25 srv3 /opt/netflow/tools/nfdump/snpsht-20070312/bin/nfcapd[29102]: System set setsockopt, SO_RCVBUF to 8388608 bytes Feb 20 12:23:25 srv3 /opt/netflow/tools/nfdump/snpsht-20070312/bin/nfcapd[29104]: Startup. The nfcapd logs do not say anything suspicious, besides reporting the sudden flow decrease. See below what happens at 14:40 and 14:45 (this is *not* just a statistical variation...) Feb 20 14:30:00 srv3 /opt/netflow/tools/nfdump/snpsht-20070312/bin/nfcapd[29098]: Ident: 'nyc_us' Flows: 21515, Packets: 64265, Bytes: 53956658, Sequence Errors: 0, Bad Packets: 0 Feb 20 14:35:00 srv3 /opt/netflow/tools/nfdump/snpsht-20070312/bin/nfcapd[29098]: Ident: 'nyc_us' Flows: 21911, Packets: 67613, Bytes: 55188398, Sequence Errors: 0, Bad Packets: 0 Feb 20 14:40:10 srv3 /opt/netflow/tools/nfdump/snpsht-20070312/bin/nfcapd[29098]: Ident: 'nyc_us' Flows: 16294, Packets: 48048, Bytes: 38833991, Sequence Errors: 0, Bad Packets: 0 Feb 20 14:45:01 srv3 /opt/netflow/tools/nfdump/snpsht-20070312/bin/nfcapd[29098]: Ident: 'nyc_us' Flows: 11539, Packets: 39856, Bytes: 33146454, Sequence Errors: 0, Bad Packets: 0 Feb 20 14:50:01 srv3 /opt/netflow/tools/nfdump/snpsht-20070312/bin/nfcapd[29098]: Ident: 'nyc_us' Flows: 23377, Packets: 77129, Bytes: 58791745, Sequence Errors: 0, Bad Packets: 0 Feb 20 14:55:01 srv3 /opt/netflow/tools/nfdump/snpsht-20070312/bin/nfcapd[29098]: Ident: 'nyc_us' Flows: 22632, Packets: 66723, Bytes: 52668692, Sequence Errors: 0, Bad Packets: 0 Feb 20 15:00:01 srv3 /opt/netflow/tools/nfdump/snpsht-20070312/bin/nfcapd[29098]: Ident: 'nyc_us' Flows: 21927, Packets: 73837, Bytes: 54720426, Sequence Errors: 0, Bad Packets: 0 Thanks, Maurizio ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ Nfsen-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
