[j-nsp] jflow v9 - flow start timestamp not reset

Andrew Jones aj at jonesy.com.au
Sat Aug 11 22:52:34 EDT 2012


Hi All,
There is a behaviour in jflow v9 which is frustrating me whereby once
flows reach the active timeout the flow is exported, the packet and byte
counters reset, but the flow remains in the flow table and the start time
is not modified. According to Juniper's docs [1], this is to make it easier
to identify long-lived flows.

This is annoying when looking at a short period of flow data (eg. 5 mins)
with tools such as nfdump, because the caculated bps and pps values are way
too low if the flow started before the beginning of the period you are
looking at.

Does anyone know if there's a hidden knob in junos to tell it to reset the
flow start time on flows that reach the active timeout?
Thanks,
Andrew

[1] http://www.juniper.net/us/en/local/pdf/app-notes/3500204-en.pdf (page
6)


More information about the juniper-nsp mailing list