Huge difference in incoming traffic counters after upgrade

35 views

Skip to first unread message

Peter Eriksson

unread,

Jan 19, 2021, 11:54:40 AM1/19/21

to FastNetMon user group

Hi!

After upgrading FastNetMon community version from 1.1.4 to 1.1.9 there is a huge difference in incoming traffic counters. The outgoing traffic counters seem to be correct and are the same as before the upgrade. The incoming ones are now about 20% too high, across all hosts, networks and total counters, for both PPS and BPS.

I am using sampled Netflow with a sample ratio of 1024, with both v5 and v9 packets coming from Cisco and Juniper routers respectively.

Anyone have any idea what is going on or have experienced something similar?

Best regards,

Peter

Pavel Odintsov

unread,

Jan 19, 2021, 1:45:06 PM1/19/21

to Peter Eriksson, FastNetMon user group

Hello!

We did quite a serious number of changes between these versions and we completely reworked Netflow / IPFIX processing logic but we did not make any changes for traffic calculation logic. 1.1.4 has the only option to manually configure sampling rate in configuration. In 1.1.9 we can read it directly from your routers and in this case you may expect issues when it does not match or you have multiple samplers.

Big number of hosts to monitor can cause such behavior too. Any overloaded cores in htop output?

--
Follow us on social media: Twitter: https://twitter.com/fastnetmon | Facebook: https://www.facebook.com/fastnetmon/ | LinkedIn: https://www.linkedin.com/company/fastnetmon/
---
You received this message because you are subscribed to the Google Groups "FastNetMon user group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to fastnetmon+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/fastnetmon/666246d3-d7d1-449b-b5dd-99a8c05e372en%40googlegroups.com.