[flow-tools] netflow udp packets seem to be delivered in batch

[Horatio B. Bogbindero]

Surlignage Mark Fullmer <maf@eng.oar.net>:

> It's only data generated from the supervisors that have had problems, not
> streams passing through.  Maybe I misunderstood your question.  Is the
> bursty behavior causing flow-capture to drop flows?
> 

just to clarify. my system basically is just to monitor the edge routers in 
our network. these edge routers are connected to a 5509 core switch. the 
flow-tools box is also connected to the 5509. i am just collecting flows 
from the edge router and not the 5509. i was just wondering why does the 
flows coming in batches. there seem to be no dropped flows as the bandwidth 
aggregates seem to be correct. 

thanks.

> On Sun, May 19, 2002 at 08:45:21PM +0800, Horatio B. Bogbindero wrote:
> > Surlignage Mark Fullmer <maf@eng.oar.net>:
> > 
> > > Historically the 55XX and 65XX supervisor modules do a poor job of
> pacing
> > > NetFlow exports.  It may have been fixed in later revisions of the
> > > supervisor software...
> > > 
> > that is an interesting note. does this problem occur even if netflow is 
not
> activated on the switches. does this mean if i replace the switch or move 
the
> collecter closer to the cisco (net wise) performance will improve?
> > 
> > thanks.
> > 
> > > mark
> > > 
> > > On Fri, May 17, 2002 at 05:01:11PM +0800, Horatio B. Bogbindero wrote:
> > > > 
> > > > netflow udp packets seem to be delivered in batch. is this normal
> behaviour
> > > of
> > > > the new netflow (0.57)? i remember 0.56 receiving packets in real
> time.
> > > > 
> > > > i suspect somethings. for example, between, the 3663 and the
> collector
> > > machine 
> > > > is a 5509 with a large amount of vlans. or does the 5509 batch the
> flows?
> > > > 
> > > > thanks in advance.
> > > > 
> > > > -------------------------------------------
> > > > William Emmanuel S. Yu
> > > > Ateneo Campus Network Group (AteneoCNG)
> > > > email  :  wyu at ateneo dot edu
> > > > web    :  http://CNG.ateneo.net/wyu/
> > > > phone  :  +63(2)4266001-4186
> > > > GPG    :  http://CNG.ateneo.net/wyu/wyy.pgp
> > > > 
> > > > 
> > > > _______________________________________________
> > > > flow-tools@splintered.net
> > > > http://www.splintered.net/sw/flow-tools
> > > 
> > > _______________________________________________
> > > flow-tools@splintered.net
> > > http://www.splintered.net/sw/flow-tools
> > > 
> > 
> > 
> > 
> > -------------------------------------------
> > William Emmanuel S. Yu
> > Ateneo Campus Network Group (AteneoCNG)
> > email  :  wyu at ateneo dot edu
> > web    :  http://CNG.ateneo.net/wyu/
> > phone  :  +63(2)4266001-4186
> > GPG    :  http://CNG.ateneo.net/wyu/wyy.pgp
> 



-------------------------------------------
William Emmanuel S. Yu
Ateneo Campus Network Group (AteneoCNG)
email  :  wyu at ateneo dot edu
web    :  http://CNG.ateneo.net/wyu/
phone  :  +63(2)4266001-4186
GPG    :  http://CNG.ateneo.net/wyu/wyy.pgp