Hi Paolo, On Mon, 22 Jun 2009, Paolo Lucente wrote:
> > 2. Accuracy of stats ? There have been quite a few emails to the list > > on how accurate netflow stats are and there have been instances where > > people have been getting twice the numbers they should have and other > > where there was huge spikes. In the testing I have done I am getting a > > discrepancy of 6-7% of the bytes recorded. > > OK. Can you then scan those emails and come back with some more data > about your case, ie. average imix and packets count other than bytes > count? I also get huge spikes which are unaccountable for, even after recompiling with 64-bit counters. It's not a single entry but rather all flow records for a few minutes at a time, then it goes back to normal. It's way more than my poor router or internet connection could sustain (gigabytes per second). This is using pcap rather than netflow. I'm suspecting memory corruption in pmacct. How would I get the average packet size for you? Cheers, Chris. -- Aptivate | http://www.aptivate.org | Phone: +44 1223 760887 The Humanitarian Centre, Fenner's, Gresham Road, Cambridge CB1 2ES Aptivate is a not-for-profit company registered in England and Wales with company number 04980791. _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
