Hi.
I think, that there is not very good hash function now used in
ng_netflow in traffic aggregation. So if
> ip-addr varies from 10.60.0.0 to 10.60.100.255
means than destination address will vary in this range and all other
parameters is remain constant then it will be worst case possible.
Try other traffic pattern (as example random ports or src addrs) or wait
for some time. We have discussed it with author and hi will probably
change this function.
--
Alexander Motin
_______________________________________________
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"