[j-nsp] inline jflow

Phil Rosenthal pr at isprime.com
Wed Dec 11 23:56:04 EST 2013


On Dec 8, 2013, at 1:09 PM, moki <vomoki at gmail.com> wrote:


> when i execute the command
> show services accounting flow inline-jflow fpc-slot 0
> The counters don't grow
>  Flow information
>    FPC Slot: 0
>    Flow Packets: 9811498, Flow Bytes: 7364152991
>    Active Flows: 4294967295, Total Flows: 4134755
>    Flows Exported: 3838520, Flow Packets Exported: 388170
>    Flows Inactive Timed Out: 3620229, Flows Active Timed Out: 514527


It sounds like you have exceeded the limits of the flow table.

Try raising “forwarding-options sampling instance sample-ins1 input rate" to 500 to see if you reliably get flows again.  If so, you can gradually step the sampling rate down to a level that reliably handles your traffic, or add an MS-MPC to increase inline jflow capacity if you really do “need” 1:1 sampling. Depending on your needs, sampled flows may be totally adequate.

-Phil





More information about the juniper-nsp mailing list