I'm heading home soon so I'll take a look at this tomorrow. Just for kicks, did you compile with the defaults? There are a TON of things to tweak in some of the source files - globaldefines.h or something like that is one of them. With as many hosts and flows as you may have it might be worth looking into these even if it doesn't fix your immediate problem.
FYI: On newer IOS's they support the command "ip flow ingress | egress" within an interface. So, if the traffic you're wanting to monitor eventually flows through one interface, you only have to configure "ip flow ingress and egress" there - not on all 1000 interfaces - handy. G -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Richard Laager Sent: Tuesday, January 29, 2008 5:14 PM To: [email protected] Subject: Re: [Ntop] NetFlow Interfaces On Tue, 2008-01-29 at 15:46 -0600, Gary Gatten wrote: > Can you post the Netflow configs from your router(s)? See the attached files. > I too had issues with CPU on 3.3.3 on FreeBSD. I'm running 3.2.1 OK - > but it segfaults and dies more than I'd like. I will tell you from what > I've seen if there are a bunch of flows arriving to nTop when the > netflow interfaces are activated it does take a LONG time to catch up > and does consume 100% CPU until it does - even on 3.2.1. If you still > have 3.3.x maybe turn it up when flow exports are light and see what > happens. I don't think this is it. I can try tonight, though, I suppose. As another point of reference... I just disabled router2 (the one with thousands of subinterfaces). To be clear, that left just router1 doing netflows (and eth0, but the only traffic there is my browsing the ntop HTTP interface); session tracking was off for all of this. Then, I removed ntop 3.2 and installed ntop 3.3, which immediately maxed out the CPU. I removed it and put 3.2 back and the CPU load is at most 5%. I don't really know what it means, but in case this helps: According to the traffic page, the total packets processed for router1 is 265,680 in about 5 minutes. Adding router2 back, still with ntop 3.2 and session tracking disabled, brings me to about 10-15% CPU usage. Richard <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font> _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
