[c-nsp] sampled v9 netflow

Dobbins, Roland rdobbins at arbor.net
Fri Nov 29 06:14:58 EST 2013


On Nov 29, 2013, at 6:09 PM, Nikolay Shopik <shopik at inblock.ru> wrote:

> Even when you draw graph in 5 min interval?

Yes.  Your graphs will be way off unless you bring the active timer down to 60s, irrespective of graph resolution.

You should also consider graphing with 1-minute intervals, it's more operationally useful.

> As lowering values means more flows exported per min so more load.

NDE is going to consume a very low CPU percentage, normally single-digit; if you're so close to the edge that NDE load matters, you have bigger problems.

;>

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

	  Luck is the residue of opportunity and design.

		       -- John Milton




More information about the cisco-nsp mailing list