Home page logo

nanog logo nanog mailing list archives

Re: Interesting netflow entry
From: "Christopher L. Morrow" <christopher.morrow () verizonbusiness com>
Date: Tue, 07 Feb 2006 18:33:10 +0000 (GMT)

On Tue, 7 Feb 2006, Bill Nash wrote:

Erm, that seems kind of low. Flow volume for two 6509s in what I consider
a small to medium size hosting site, with about 6+ gigs of differentiated
egress generates more than 8 to 9 *thousand* flows per second, and that's
after discard incomplete tcp flows (port scans, half open syns, etc.)

Are you sure you're getting everything?

he did previously state he was only using about 120mbps... and it'd depend
upon his/your sample rates as well...

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]