Netflow showing peak more than the physical bandwidth

[moneyworks]

Hi there,

I saw netflow reading for peak utilisation is higher higher than the physical bandwidth. How could this be possible? Anyone have this problem before?

[hgru]

Hi,

Can think of two reasons.

-There is comprssion on the link

-There is some buffering between the link and the netflow process.

Hans

[senthil331]

Hi,

I have the same problem.

Can't believe how this is possible.

[hgru]

Dit you configure the bandwidth correctly on the interface with the bandwidth command?

Hans

[Jan Nejman]

Hello,

which software or tool do you using? I saw some software that badly parse flow information. Try to decrease netflow timeouts. (flows will be more often exported).

see:

router(config)# ip flow-cache timeout active 1

router(config)# ip flow-cache timeout inactive 10

- or -

switch> (enable) set mls agingtime long 64

switch> (enable) set mls agingtime 32

Jan

Caligare Co.

http://www.caligare.com