Hi!
OpenBSD ... 4.0 GENERIC.MP#0 i386 (2x Xeon P4 ) is located after Cisco
(7206VXR) .
Netflows from the Cisco and the Openbsd are collected on a collector
(flow-tools).
I've got for the same hour for the same networks, from OpenBSD:
Total Flows : 59671
Total Octets : 3111418360
.........
Average Kbits / second (flow) : 419.2015
Average Kbits / second (real) : 3319.2888
and from the Cisco:
Total Flows : 783739
Total Octets : 9246726494
........
Average Kbits / second (flow) : 7958.4517
Average Kbits / second (real) : 9864.4893
Three times difference!!!
Data from Cisco corresponds for the other sourses results ( SNMP
counters,....).
I've try different pf rulesets , in particular this:
pass in log (all) inet all keep state
pass out log (all) inet all keep state
but the problem still here. "log (all)" I need for other purposes.
Does anyone meet a problem like this?
OpenBSD load:
# uptime
............ load averages: 0.29, 0.43, 0.37
Thanks!
Alexander Zatserkovniy