-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi Lars,
There is a universal answer to this: it depends! :)
Lars Lystrup Christensen wrote:
| Hi group
|
|
|
| We are currently using nfdump for gathering netflow data for several
| purposes. Now I'm curious how well nfsen scales for the graphical
| display of information gathered by nfdump.
|
|
|
| We currently gather around 20-25 GB of data every day on a centralized
| netflow collector from 5-6 netflow sources.
|
|
|
| My question is:
|
|
|
| 1. How much storage would be needed for the data generated by
| nfsen?
Whatever you think will suit your needs! The storage mainly defines the time
back you have your netflow data available.
The amount of disk space spent for NfSen has no real impact for NfSen. Just
make sure your OS can handle the large
storage properly. Several TB work perfectly well on our side. Much more
important than the amount of disk space, is the
I/O performance of the storage. You'll have a lot of write operations.
|
|
| 2. How CPU intensive is this operation?
This highly depends on how many profiles you have, and how many plugins you run
at every 5 min, and what flow processing
you in potential plugins. This will be the major CPU consumer. NfSen itself
needs only moderate CPU resources even with
a lot of profiles. Some users have more than 200 profiles - and it seems to
work.
Note: While processing flows in the details page, take care about the time slot
you select for processing flows. While
selecting a large time window is an easy thing, this may result in processing
several 100MBs or even GBs of data, and
creating statistics may consume a lot of memory.
- Peter
|
| ______________________________________
|
| Med venlig hilsen / Kind regards
|
| Lars Lystrup Christensen
| Director of Engineering, CCIE(tm) #20292
|
| Danske Telecom A/S - Clearwire Denmark
|
|
|
|
|
|
|
|
| ------------------------------------------------------------------------
|
| -------------------------------------------------------------------------
| This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
| Build the coolest Linux based applications with Moblin SDK & win great prizes
| Grand prize is a trip for two to an Open Source event anywhere in the world
| http://moblin-contest.org/redirect.php?banner_id=100&url=/
|
|
| ------------------------------------------------------------------------
|
| _______________________________________________
| Nfsen-discuss mailing list
| [email protected]
| https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag, Security Engineer, Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7
SWITCH, Werdstrasse 2, P.O. Box, CH-8021 Zurich, Switzerland
E-mail: [EMAIL PROTECTED] Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)
iQCVAwUBSImWvP5AbZRALNr/AQKpcwP/e2mGCqDFwZ+lguHMkxbpBlyjZdQ00JcO
0ywIGY2mWmUP27AlG+fMgbwzbqHgHEnBNVPjOXStKV+ynrxTOjY8hEXgp9LUmlsK
Ub/7121KPF3wnbdMyVwEru3aShxFbrjsmEVrDg19GEj5kd+piREdU9WyBijwk8gb
wbpBloPhSGA=
=O+M9
-----END PGP SIGNATURE-----
-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
