[flow-tools] Cat6500 and Netflow

[Shane Dawalt]

   I need to re-send this message to the list as I made one particularly 
important error in the original message.

   I have a hybrid-mode (not native-mode as originally described) 
Cat6513  that I have configured for nde to a dual AMD64 box.  The 
current flow mode is destination-only (that may change).  I have 
flow-capture running on a dual AMD64 box (0.68) running atop RedHat 
Enterprise Linux v.3 (2.4 kernel). The flow-capture application is 
occasionally reporting lost flows: anywhere from 270 down to 100ish.  It 
doesn't happen very often, but when it does it usually happens several 
times in succession.  That implies maybe lots of traffic on the switch. 
  I've tweaked the long-duration flow aging time to 128 seconds and the 
ip statistics flows fast aging time to 32 seconds with a packet 
threshold of 0.  I've seen the Netflow entries counter increase to 15000 
or so, but as I understand it, the 6513 should support upto 32000. 
Anyone have pointers on where to go from here?

  Shane