nanog mailing list archives
periodic patterns in juniper netflow exports
From: "Fernando Silveira" <fernando.jorge.silveira () gmail com>
Date: Thu, 3 Jan 2008 10:57:20 +0100
hi there, I'm analyzing NetFlow traces from Abilene (which uses Juniper, of course) and I'm seeing a periodic pattern in the traces. I know about the activity and inactivity timeouts that can be set in JunOS to control flow exports, but in the data I'm analyzing it seems like there is some kind of global clock that flushes the flow cache every minute. I mean the router exports *all* flows which are active at the end of a time bin of one minute. Because of this, the flow records look like they are binned in 1 minute intervals. By the way, I'm not talking about any manipulation done by the collector. I'm really looking at the FIRST and LAST time stamps contained in each flow record. Can anyone tell me if there is such a timer in JunOS, i.e., flushing the flow cache every minute (or an interval defined as a parameter)? Thanks in advance and happy Hew Year! Fernando Silveira
Current thread:
- periodic patterns in juniper netflow exports Fernando Silveira (Jan 03)
- Re: periodic patterns in juniper netflow exports Roland Dobbins (Jan 03)
- Re: periodic patterns in juniper netflow exports Fernando Silveira (Jan 03)
- Re: periodic patterns in juniper netflow exports Roland Dobbins (Jan 03)
- Re: periodic patterns in juniper netflow exports Fernando Silveira (Jan 03)
- Re: periodic patterns in juniper netflow exports Roland Dobbins (Jan 03)