Hi.

I think, that there is not very good hash function now used in ng_netflow in traffic aggregation. So if
> ip-addr varies from 10.60.0.0 to 10.60.100.255
means than destination address will vary in this range and all other parameters is remain constant then it will be worst case possible.

Try other traffic pattern (as example random ports or src addrs) or wait for some time. We have discussed it with author and hi will probably change this function.

--
Alexander Motin
_______________________________________________
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to