Re: [c-nsp] ASR1006 Netflow default sample rate

2017-01-10 Thread Roland Dobbins
On 10 Jan 2017, at 23:04, Satish Patel wrote: How people decide what sample rate is appropriate for them what is the criteria to decide? It's a combination of aggregate bps/pps rates on the interface of the router(s) exporting flow telemetry, how flow-generation impacts their

Re: [c-nsp] ASR1006 Netflow default sample rate

2017-01-10 Thread Satish Patel
How people decide what sample rate is appropriate for them what is the criteria to decide? On Sat, Jan 7, 2017 at 5:25 PM, wrote: >> Roland Dobbins >> Sent: Friday, January 06, 2017 5:54 PM >> >> On 6 Jan 2017, at 23:29, Satish Patel wrote: >> >> > What is the

Re: [c-nsp] ASR1006 Netflow default sample rate

2017-01-07 Thread adamv0025
> Roland Dobbins > Sent: Friday, January 06, 2017 5:54 PM > > On 6 Jan 2017, at 23:29, Satish Patel wrote: > > > What is the appropriate sample rate > > Situationally-dependent. > I was always wondering what is the purpose of 1:1 sampling anyways, flow analyser reacting faster (IDS/IPS)? > >

Re: [c-nsp] ASR1006 Netflow default sample rate

2017-01-06 Thread Roland Dobbins
On 6 Jan 2017, at 23:29, Satish Patel wrote: > What is the appropriate sample rate Situationally-dependent. > and is there any impact in performance? Negligible. To what are you comparing your flow-derived stats? --- Roland Dobbins

Re: [c-nsp] ASR1006 Netflow default sample rate

2017-01-06 Thread Satish Patel
we have 10G link and at most max traffic is 2G. reason i ask question because in Nfsen i am seeing higher value in (%Bytes) column. I thought it could be sample rate issue so i can match up with cisco device. What is the appropriate sample rate and is there any impact in performance? On Thu,

Re: [c-nsp] ASR1006 Netflow default sample rate

2017-01-05 Thread Roland Dobbins
On 6 Jan 2017, at 10:27, Satish Patel wrote: This is my configuration, nothing fancy. OK, so change the sampling rate to something you like/need per your situationally-specific needs. Your active timer is set to 60s, which is good. Set the inactive one to 5s. Maybe try the v9 default

Re: [c-nsp] ASR1006 Netflow default sample rate

2017-01-05 Thread Satish Patel
I came across with this link and it saying default sample rate 1 https://www.plixer.com/blog/netflow/how-to-configure-netflow-on-the-cisco-asr/ This is my configuration, nothing fancy. flow record netflow-record match ipv4 destination address match ipv4 source address match transport

Re: [c-nsp] ASR1006 Netflow default sample rate

2017-01-05 Thread Roland Dobbins
On 6 Jan 2017, at 6:48, Satish Patel wrote: > Any thought? On a smaller box like the 1K, it's likely to be 1:1, yes? Have you set the active timer to 60s, and the inactive timer to 5s? --- Roland Dobbins

Re: [c-nsp] ASR1006 Netflow default sample rate

2017-01-05 Thread Satish Patel
Any thought? Sent from my iPhone > On Jan 4, 2017, at 1:23 PM, Satish Patel wrote: > > We are using Cisco ASR1k with netflow + nfsen we are seeing some add > number in nfsen aggregated data, and some folks saying it could be > sample rate issue. > > I haven't set any

[c-nsp] ASR1006 Netflow default sample rate

2017-01-04 Thread Satish Patel
We are using Cisco ASR1k with netflow + nfsen we are seeing some add number in nfsen aggregated data, and some folks saying it could be sample rate issue. I haven't set any exclusive sample rate in Netflow configuration so what should be the default value? We have 10G fiber link but it used max