Re: [TEST/REVIEW] Netflow implementation

From: Gleb Smirnoff (glebius_at_freebsd.org)
Date: 09/08/04

  • Next message: Bruce M Simpson: "[PATCH] Add ioctl to disable bpf timestamping" 
    Date: Wed, 8 Sep 2004 12:56:07 +0400
To: Patrick.Guelat@imp.ch

    On Wed, Sep 08, 2004 at 10:43:34AM +0000, Patrick.Guelat@imp.ch wrote:
    P> > here is netgraph module which implements Netflow traffic
    P> >accounting, which I'm going to add to CURRENT in recent future:
    P> >[..]
    P> >I've been testing it for last week on loaded 100Mbit Ethernet
    P> >which serves 9 ASes, 12 prefixes :) And it works stable.
    P>
    P> Did some tests here, looks very nice ! At least our netflow-collector
    P> is happy with the data ;-)

    The only empty fields are ASNs :) I hope to fill them in future.

    P> flowctl did not work for me, to which
    P> node do you have to send the msg to ?

    I usually call node "netflow" using 'ngctl name', and then call
    'flowctl netflow show'.

    P> I attached two netflow nodes on a tee, one right2left and one left2right
    P> to catch both directions.

    This is working solution, but not correct. :)
    To catch both directions you should feed ng_netflow with incoming traffic
    from all interfaces. 

    -- 
Totus tuus, Glebius.
GLEBIUS-RIPN GLEB-RIPE
_______________________________________________
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
  • Next message: Bruce M Simpson: "[PATCH] Add ioctl to disable bpf timestamping"

    Relevant Pages

    • Re: Measure amount of network usage
      ... netflow is adequate to this task. ... With ip accounting it's much to difficult to investigate. ... the switch and/or router, but you must remember that measurement of ... you to graph each switchport on the switch (you would need to resolve ...
      (comp.dcom.sys.cisco)
    • Re: Troubleshooting 6509 - SUP720 - ip accounting
      ... I'm surprised if ip accounting did much useful on this platform. ... Maybe the Sup720 is able to forward more packets in hardware than the ... Netflow is definitely something to look at. ... netflow stats collect seems to be in hardware once the flows are set up. ...
      (comp.dcom.sys.cisco)
    • Re: tcp hostcache and ip fastforward for review
      ... > traffic statistics as well. ... I believe Netflow is used for accounting purposes now (although back ... every time a routing change is made. ...
      (freebsd-net)
    • Re: traffic accounting im Gigabit-Bereich
      ... Accounting auf IP-Ebene in einem Gigabit-Netzwerk beherrscht. ... Bei zu viel Traffic kann man ... Netflow auch samplen, als nur z.b. jedes 1024 Paket herausfischen. ...
      (de.comp.os.unix.networking.misc)
    • Re: Troubleshooting 6509 - SUP720 - ip accounting
      ... I'm surprised if ip accounting did much useful on this platform. ... Maybe the Sup720 is able to forward more packets in hardware than the ... Netflow is definitely something to look at. ...
      (comp.dcom.sys.cisco)