On 10 Jan 2017, at 23:04, Satish Patel wrote:
How people decide what sample rate is appropriate for them what is the
criteria to decide?
It's a combination of aggregate bps/pps rates on the interface of the
router(s) exporting flow telemetry, how flow-generation impacts their
How people decide what sample rate is appropriate for them what is the
criteria to decide?
On Sat, Jan 7, 2017 at 5:25 PM, wrote:
>> Roland Dobbins
>> Sent: Friday, January 06, 2017 5:54 PM
>>
>> On 6 Jan 2017, at 23:29, Satish Patel wrote:
>>
>> > What is the
> Roland Dobbins
> Sent: Friday, January 06, 2017 5:54 PM
>
> On 6 Jan 2017, at 23:29, Satish Patel wrote:
>
> > What is the appropriate sample rate
>
> Situationally-dependent.
>
I was always wondering what is the purpose of 1:1 sampling anyways, flow
analyser reacting faster (IDS/IPS)?
> >
On 6 Jan 2017, at 23:29, Satish Patel wrote:
> What is the appropriate sample rate
Situationally-dependent.
> and is there any impact in performance?
Negligible.
To what are you comparing your flow-derived stats?
---
Roland Dobbins
we have 10G link and at most max traffic is 2G. reason i ask question
because in Nfsen i am seeing higher value in (%Bytes) column. I
thought it could be sample rate issue so i can match up with cisco
device.
What is the appropriate sample rate and is there any impact in performance?
On Thu,
On 6 Jan 2017, at 10:27, Satish Patel wrote:
This is my configuration, nothing fancy.
OK, so change the sampling rate to something you like/need per your
situationally-specific needs.
Your active timer is set to 60s, which is good. Set the inactive one to
5s.
Maybe try the v9 default
I came across with this link and it saying default sample rate 1
https://www.plixer.com/blog/netflow/how-to-configure-netflow-on-the-cisco-asr/
This is my configuration, nothing fancy.
flow record netflow-record
match ipv4 destination address
match ipv4 source address
match transport
On 6 Jan 2017, at 6:48, Satish Patel wrote:
> Any thought?
On a smaller box like the 1K, it's likely to be 1:1, yes?
Have you set the active timer to 60s, and the inactive timer to 5s?
---
Roland Dobbins
Any thought?
Sent from my iPhone
> On Jan 4, 2017, at 1:23 PM, Satish Patel wrote:
>
> We are using Cisco ASR1k with netflow + nfsen we are seeing some add
> number in nfsen aggregated data, and some folks saying it could be
> sample rate issue.
>
> I haven't set any
We are using Cisco ASR1k with netflow + nfsen we are seeing some add
number in nfsen aggregated data, and some folks saying it could be
sample rate issue.
I haven't set any exclusive sample rate in Netflow configuration so
what should be the default value?
We have 10G fiber link but it used max
10 matches
Mail list logo