Hi Scott, hi Adrian,

On 06/23/2014 03:42 PM, Scott Granados wrote:
> I noticed that the mx480 routers and 960 routers don’t send the flow sample 
> rate as part of the packet.  Or at least I didn’t see the export of the 
> sample rate do anything, I had to set and then reset the sample rate by hand. 
>  This may be do to inline sampling where the sample rate is always 1:1 but 
> the sample rate variable simply controls the rate of export not the physical 
> sample rate.
> 
> Either way it worked and I have to say NFSEN is really growing on me in a 
> very positive way.  I wish I was better at scripting to get more useful 
> mailed reports etc but it wasn’t that hard to get really useful stuff 
> directly out of the box.
> 
> On Jun 23, 2014, at 4:52 AM, Adrian Popa 
> <[email protected]<mailto:[email protected]>> wrote:
> 
> No, that should be it. By default nfcapd "listens" for the sample rate from 
> special netflow profile packets. If you notice weird issues, you can manually 
> force a 1:1 sample rate with -S -1 switch (I had to do it in a special case).
> 
> 
> On Thu, Jun 19, 2014 at 6:10 PM, Scott Granados 
> <[email protected]<mailto:[email protected]>> wrote:
> Morning list,
> Recently I had posted about adjusting the sample rate and got some great 
> information that worked for me.  I’m about to change the sample export rate 
> on my router from 1:1000 to 1:1.  Am I correct that nfsen looks for a default 
> rate of 1:1 so if I remove the -S -1000 and restart I should be good and 
> scale properly?  Just want to make sure it’s that simple.  I’m going to 
> adjust each source one at a time and make the matching change on the nfcapd 
> instance.  Any gotchas I should consider?

We had the same issue with MX960. There is no evidence in any IPFIX template
send by the Juniper that it is sampled IPFIX. Although it is sampled forcing the
sampling rate did the trick here too. Thanks for pointing this out. I already
tried it with setting the sampling rate in nfsen.conf but missed the option "-"
to force it. Without "force" it does not work.


Regards,
Axel

------------------------------------------------------------------------------
Open source business process management suite built on Java and Eclipse
Turn processes into business applications with Bonita BPM Community Edition
Quickly connect people, data, and systems into organized workflows
Winner of BOSSIE, CODIE, OW2 and Gartner awards
http://p.sf.net/sfu/Bonitasoft
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss

Reply via email to