[flow-tools] Cat6500 and Netflow
Shane Dawalt
shane.dawalt at wright.edu
Wed Aug 31 16:22:13 EDT 2005
I have a native-mode Cat6500 (6513 actually) that I have configured
for nde to a dual AMD64 box. The current flow mode is destination-only
(that may change). I have flow-capture running on a dual AMD64 box
(0.68) running atop RedHat Enterprise Linux v.3 (2.4 kernel). The
flow-capture application is occasionally reporting lost flows: anywhere
from 270 down to 100ish. It doesn't happen very often, but when it does
it usually happens several times in succession. That implies maybe lots
of traffic on the switch. I've tweaked the long-duration flow aging
time to 128 seconds and the ip statistics flows fast aging time to 32
seconds with a packet threshold of 0. I've see the Netflow entries
counter increase to 15000 or so, but as I understand it, the 6513 should
support upto 32000. Anyone have pointers on where to go from here?
Shane
More information about the flow-tools
mailing list