nanog mailing list archives
Re: Interesting netflow entry
From: Bill Nash <billn () odyssey billn net>
Date: Tue, 7 Feb 2006 13:21:15 -0500 (EST)
On Mon, 6 Feb 2006, Wil Schultz wrote:
Incidentally (because I ask everyone this), what's your flow volume (flows per second)?Cannot get ahold of the machine until tomorrow. I did a 'wc' on 4 devices for 5 minutes and it comes out to just under 3600, about 11-12 per second...
Erm, that seems kind of low. Flow volume for two 6509s in what I consider a small to medium size hosting site, with about 6+ gigs of differentiated egress generates more than 8 to 9 *thousand* flows per second, and that's after discard incomplete tcp flows (port scans, half open syns, etc.)
Are you sure you're getting everything? - billn
Current thread:
- Interesting netflow entry Wil Schultz (Feb 06)
- Re: Interesting netflow entry Wil Schultz (Feb 06)
- Re: Interesting netflow entry Bill Nash (Feb 06)
- Re: Interesting netflow entry Wil Schultz (Feb 06)
- Re: Interesting netflow entry Bill Nash (Feb 07)
- Re: Interesting netflow entry Christopher L. Morrow (Feb 07)
- Re: Interesting netflow entry Bill Nash (Feb 07)
- Re: Interesting netflow entry Wil Schultz (Feb 07)
- Re: Interesting netflow entry Bill Nash (Feb 06)
- Re: Interesting netflow entry Wil Schultz (Feb 06)