how close are the interface counters on the http server (or the switch port)
and the total netflow stats for the server?
And is the difference that netflow reports 60% more TCP port 80 traffic than
the IIS logs?
Adi
On Sun, Jan 27, 2002 at 08:09:26PM -0800, Edward S. Desouza wrote:
> Hi,
> We use a tool called livestats that is basically an
> IIS log analyser. When comparing results with netflow
> for HHTP traffic, the difference between livestat data
> transfer reports and netflow reports is more that 60
> %.
> Any ideas to why this could be happening ? COuld
> TCP retransmission be a possible cause ?
>
>
> Rgds,
> Edward
>
>
> =====
> Edward S. Desouza
> 23/24 Manali 5,
> Evershine Nagar,
> Malad (W),
> Bombay 400064.
> Tel :9122-8886362
>
> __________________________________________________
> Do You Yahoo!?
> Great stuff seeking new owners in Yahoo! Auctions!
> http://auctions.yahoo.com
>
This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:13:01 EDT