-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Tony Gray wrote:
> On Thu, 2009-07-23 at 13:16 +0200, Peter Haag wrote:
>> You have active an inactive timeouts on the router - so check the
>> router
>> documentation for that. I guess in your case, you may have long
>> lasting flows
>> ( more than 300s ) so the entire traffic is counted for the time slot,
>> when the
>> flow is exported. This results in spikes or losses in the graph. To
>> prevent this
>> set the active timeout to 300s ( or 60s, 100s on busy routers ), so
>> the accumulated
>> traffic in a timeslot is counted in the correct slots in NfSen. Other
>> timeouts
>> should also be set "NfSen fiendly" in 300s intervals.
>
> Hi Peter,
> I currently have the time outs set as follows:
>
> cache timeout active 300
> cache timeout inactive 300
>
> I am noticing that traffic doesn't seem to be counted in the correct time
> slots alright.
>
> So reduce the active time out to 100s and leave the inactive one at 300s, or
> would you recommend reducing that one too? It is IOSXR btw.
In theory 300s should be ok - but I'm not a router expert. Give it a try for
60s or 100s - UDP timeouts can be even more aggressive. Maybe other people
have other recommendations.
- Peter
> Thanks,
> Tony
- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag, Security Engineer, Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7
SWITCH, Werdstrasse 2, P.O. Box, CH-8021 Zurich, Switzerland
E-mail: [email protected] Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)
iQCVAwUBSmhLV/5AbZRALNr/AQJirwP9Gg/9fYpmpYwRDelylTlJajgBipva0ZwB
MAfHgNgz0/VN0Y6ip87djM8H+q8ZSAq7DcpHKbR9O3NQ+mlxuvzTQuKkZvRQ1AAr
AlPNERZ1yvtsbV8bmpOWil2H5gxClWj8g2S4C6Y2ndi2v0CC69LoH6H+H4prtyMA
Q4PQj14slA8=
=GBLu
-----END PGP SIGNATURE-----
------------------------------------------------------------------------------
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
