I noticed that the mx480 routers and 960 routers don’t send the flow sample 
rate as part of the packet.  Or at least I didn’t see the export of the sample 
rate do anything, I had to set and then reset the sample rate by hand.  This 
may be do to inline sampling where the sample rate is always 1:1 but the sample 
rate variable simply controls the rate of export not the physical sample rate.

Either way it worked and I have to say NFSEN is really growing on me in a very 
positive way.  I wish I was better at scripting to get more useful mailed 
reports etc but it wasn’t that hard to get really useful stuff directly out of 
the box.

On Jun 23, 2014, at 4:52 AM, Adrian Popa 
<[email protected]<mailto:[email protected]>> wrote:

No, that should be it. By default nfcapd "listens" for the sample rate from 
special netflow profile packets. If you notice weird issues, you can manually 
force a 1:1 sample rate with -S -1 switch (I had to do it in a special case).


On Thu, Jun 19, 2014 at 6:10 PM, Scott Granados 
<[email protected]<mailto:[email protected]>> wrote:
Morning list,
Recently I had posted about adjusting the sample rate and got some great 
information that worked for me.  I’m about to change the sample export rate on 
my router from 1:1000 to 1:1.  Am I correct that nfsen looks for a default rate 
of 1:1 so if I remove the -S -1000 and restart I should be good and scale 
properly?  Just want to make sure it’s that simple.  I’m going to adjust each 
source one at a time and make the matching change on the nfcapd instance.  Any 
gotchas I should consider?

Thank you
Scott


------------------------------------------------------------------------------
HPCC Systems Open Source Big Data Platform from LexisNexis Risk Solutions
Find What Matters Most in Your Big Data with HPCC Systems
Open Source. Fast. Scalable. Simple. Ideal for Dirty Data.
Leverages Graph Analysis for Fast Processing & Easy Data Exploration
http://p.sf.net/sfu/hpccsystems
_______________________________________________
Nfsen-discuss mailing list
[email protected]<mailto:[email protected]>
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss


------------------------------------------------------------------------------
HPCC Systems Open Source Big Data Platform from LexisNexis Risk Solutions
Find What Matters Most in Your Big Data with HPCC Systems
Open Source. Fast. Scalable. Simple. Ideal for Dirty Data.
Leverages Graph Analysis for Fast Processing & Easy Data Exploration
http://p.sf.net/sfu/hpccsystems
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss

Reply via email to