03-09-2010 05:50 AM - edited 03-04-2019 07:45 AM
Hello!
Does ESR 10008 router support NetFlow Sampling? I want to lower netflow export proccess CPU load by (for instance) exporting with packet interval 100 or more.
CPU utilization for five seconds: 38%/20%; one minute: 45%; five minutes: 46%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
232 7147543164186505465 0 7.67% 7.93% 7.93% 0 C10K Netflow Toa
230 314814348 8867268 35503 3.11% 5.17% 5.18% 0 c10k_periodic_st
310 1681353761267524883 132 2.63% 3.17% 3.10% 0 RADIUS
226 60430536 15349311 3937 0.87% 0.83% 0.84% 0 CEF: IPv4 proces
149 48171848 589780175 81 0.79% 0.93% 1.04% 0 IP Input
145 23333936 233074591 100 0.55% 0.39% 0.40% 0 AAA ACCT Proc
262 3836748 256504 14957 0.39% 0.07% 0.05% 0 URPF stats
146 37883924 231763732 163 0.23% 0.70% 0.68% 0 ACCT Periodic Pr
294 16160820 151541800 106 0.15% 0.18% 0.21% 0 PPPoE Background
295 27949612 445819138 62 0.15% 0.13% 0.16% 0 PPPoE Discovery
169 33372604 192576187 173 0.15% 0.32% 0.29% 0 SSM connection m
298 32182808 403705989 79 0.15% 0.27% 0.24% 0 PPP Events
329 6880416 22443345 306 0.07% 0.09% 0.11% 0 BGP Router
4 2330908 26951650 86 0.07% 0.03% 0.03% 0 C10K Card Event
103 2316956 900720 2572 0.07% 0.04% 0.03% 0 Compute load avg
158 34598128 99212850 348 0.07% 0.24% 0.24% 0 SSS Manager
thanks.
03-15-2010 09:09 AM
Hello Osenevp,
according to feature navigator
sampled netflow is supported only on 10700
search by feature: sampled netflow
Hope to help
Giuseppe
03-15-2010 12:10 PM
Hello. Thanks for fn. In my case probably the only one thing that I'm able to do with 10008 is to turn off 'ip flow egress' on uplink interface (while keeping 'ip flow ingress' on)
03-15-2010 02:34 PM
Hello Osenevp,
yes removing netflow accounting in one direction should reduce cpu load.
Hope to help
Giuseppe
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide