[50062] in North American Network Operators' Group
Re: Multi-collector Netflow/etc
daemon@ATHENA.MIT.EDU (Bradley Dunn)
Wed Jul 17 17:32:35 2002
From: "Bradley Dunn" <bradley@dunn.org>
To: "Pete Kruckenberg" <pete@kruckenberg.com>
Cc: <nanog@merit.edu>
Date: Wed, 17 Jul 2002 17:30:43 -0400
Errors-To: owner-nanog-outgoing@merit.edu
> Apparently there are a number of packet reflectors (usually
> running on a Unix machine) that work in theory, how do these
> work in actual practice, what kind of performance and
> reliability to they have, and which work well for traffic
> collection?
I have had good results with samplicator:
http://www.switch.ch/tf-tant/floma/sw/samplicator/
I haven't had any problems with it handling fairly heavy loads and the CPU
impact is minimal. Under very heavy loads you might want to bump up the
receive buffer (the -b command-line option).
Bradley
