[j-nsp] Juniper Netflow

Servet servet at doruk.net.tr
Thu Sep 3 09:29:05 EDT 2009


Sampling applied at the interface ...
i dont use firewall filter.


----- Original Message ----- 
From: "Stefan Fouant" <sfouant at gmail.com>
To: "Servet" <servet at doruk.net.tr>; <juniper-nsp at puck.nether.net>
Sent: Thursday, September 03, 2009 3:18 PM
Subject: Re: [j-nsp] Juniper Netflow


> Curious... Are you sampling via Firewall filter, or is sampling
> applied at the Interface?
>
>
>
> On 9/3/09, Servet <servet at doruk.net.tr> wrote:
>>
>>
>> Hi Guys
>>
>> i have a problem with juniper netflow traffic values, i think there is no
>> problem about the config and flow-analyser. If i use a cisco device, the
>> results of snmp polls and results of the flow-analyser are similar
>> But in juniper; i get 180 mbit/s traffic value with SNMP requests from my
>> juniper MX-960 router, but netflow says me it is 120mbit. Also my 
>> sampling
>> rate is 1.
>> You can see config below, do you have any idea?  why i can't get similar
>> results from snmp and netflow
>> Kind regards
>>
>>
>>
>> sampling {
>>     input {
>>         family inet {
>>             rate 1;
>>             run-length 1;
>>             max-packets-per-second 65535;
>>         }
>>     }
>>     output {
>>         cflowd x.x.x.x {
>>             port 9996;
>>             version 5;
>>             autonomous-system-type origin;
>>         }
>>         flow-inactive-timeout 600;
>>         flow-active-timeout 60;
>>         interface sp-4/1/0 {
>>             source-address y.y.y.y;
>>         }
>>     }
>> }
>> _______________________________________________
>> juniper-nsp mailing list juniper-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/juniper-nsp
>>
>
> -- 
> Sent from Gmail for mobile | mobile.google.com
>
> Stefan Fouant
>
> Stay the patient course.
> Of little worth is your ire.
> The network is down. 



More information about the juniper-nsp mailing list