Hi Paolo,
--- On Thu, 23/12/10, Paolo Lucente <[email protected]> wrote: > > The TCAM utilization you posted seems to suggest the C7600 > is > OK; but having a look to how the NetFlow export is > configured > on the box (interface + global commands) wouldn't hurt. > 7609 config is: ip flow-capture vlan-id ip flow-export source Vlan2 ip flow-export version 9 ip flow-export destination 10.1.1.38 6789 ! interface GigabitEthernet2/0/0.25 encapsulation dot1Q 25 ip vrf forwarding internet ip address a.b.97.14 255.255.255.252 ip flow ingress ! mls aging fast mls flow ip interface-destination-source no mls flow ipv6 mls nde sender ! Is there anything else that is relevant that I missed ? > What is interesting is the huge jumps in the bytes counter > in > the table you posted; was pmacct compiled for 64-bit > counters? I don't believe so, the only compile option I can remember using was the one to enable MySQL plugin. I have downloaded the latest version of pmacct and compiled with "--enable-mysql --enable-64bit". I will see how this goes. > can you post your pmacct configuration? I've left out anything that was commented out: daemonize: true aggregate[internet]: dst_host,tag pre_tag_map: /etc/pmacct/pretag.map nfacctd_port: 6789 nfacctd_time_new: true plugins: mysql[internet] sql_db: pmacct sql_table[internet]: internet sql_table_version: 2 sql_refresh_time: 3600 sql_optimize_clauses: true sql_history: 1h sql_history_roundoff: h sql_dont_try_update: true sql_preprocess[internet]: minp=1, adjb=26 syslog: local4 The pretag map is pretty simple, it determines the source the packets came from (ie. which router) and adds a tag so that we can tell how much traffic came via which router. > can you also post the > SQL query you use in order to get that table? > select bytes, stamp_inserted, stamp_updated from internet where agent_id = 1 and stamp_inserted > '2010-12-23 00:00:00' and ip_dst = 'x.y.23.200' order by 3 desc; > A propo of the math: it appears to my eyes 10Mbps * 8 * > 3600 > is much more than 4-5GB/hr? I think you need to DIVIDE by 8 to covert bits to bytes ;) 10Mb / 8 * 3660 = 4500MB Thanks, Tony.
_______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
