From: Ralf K. <ral...@df...> - 2007-11-12 09:55:03
|
Hi, I see a strange thing on one of our nfdump collectors: It is a NetFLow v5 stream being collected via nfcapd. The same router exports to a second machine which runs flow-tools. According to the flow-tools machine there are (in 24h) 72471006 flows, with 295 lost flows. Total octets is 153785371935. The nfdump box says it collected 72471301 flows and 153788096980 Bytes, which is pretty much the same. But it also says there were 87154 sequence failures. What may be the reason for this big discrepancy? |