Hi!

OpenBSD ... 4.0 GENERIC.MP#0 i386 (2x Xeon P4 ) is located after Cisco (7206VXR) .

Netflows from the Cisco and the Openbsd are collected on a collector (flow-tools).

I've got for the same hour for the same networks, from OpenBSD:
Total Flows                     : 59671
Total Octets                    : 3111418360
.........
Average Kbits / second (flow)   : 419.2015
Average Kbits / second (real)   : 3319.2888

and from the Cisco:
Total Flows                     : 783739
Total Octets                    : 9246726494
........
Average Kbits / second (flow)   : 7958.4517
Average Kbits / second (real)   : 9864.4893

Three  times difference!!!
Data from Cisco corresponds for the other sourses results ( SNMP counters,....).

I've try different pf rulesets , in particular this:

pass in log (all) inet all keep state
pass out log (all) inet all keep state

but the problem still here. "log (all)" I need for other purposes.

Does anyone meet a  problem like this?

OpenBSD load:
# uptime
............ load averages: 0.29, 0.43, 0.37

Thanks!
Alexander Zatserkovniy

Reply via email to