Robert, try and increase the hash size:

[--hash-size|-w] <hash size>        | Flows hash size [default=131072]


Simone

On Thu, Apr 7, 2016 at 6:42 PM, Finze, Robert <[email protected]
> wrote:

> Hi,
>
> today I've plugged my nprobe installation into some live traffic and got
> my first performance warning:
>
> WARNING: Your bucket search is too slow (11): expect drops
>
> In the internet I couldn't find an explanation on what the exactly means
> and how to fix this.
>
> Some more information from the log:
> [nprobe.c:2748] Flow drops: [export queue too long=0][too many
> flows=0][ELK queue flow drops=0]
> [nprobe.c:2753] Export Queue: 0/512000 [0.0 %]
> [nprobe.c:2758] Flow Buckets:
> [active=251237][allocated=251237][toBeExported=0]
> [cache.c:1224] Redis Cache [0 total/0.0 get/sec][0 total/0.0 set/sec]
> [nprobe.c:2599] Processed packets: 4544310 (max bucket search: 11)
> [nprobe.c:2605] WARNING: Your bucket search is too slow (11): expect drops
> [nprobe.c:2608] Flow export stats: [0 bytes/0 pkts][0 flows/0 pkts sent]
> [nprobe.c:2618] Flow drop stats:   [0 bytes/0 pkts][0 flows]
> [nprobe.c:2623] Total flow stats:  [0 bytes/0 pkts][0 flows/0 pkts sent]
>
> I haven't done any optimization, just took the values nbox gave me.
> Any information about this message is appreciated.
>
> Cheers
>
> Robert
> _______________________________________________
> Ntop mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to