[Flow-tools] Flow in samples

[bill fumerola]

On Thu, Oct 25, 2007 at 12:31:12PM -0200, Caio Brentano wrote:
> What can I do about routers, like Juniper, that send flows in samples?

0) set a sample rate
1) make sure you're getting a consistant sample rate, not one that varies
   because too much is being sampled
2) configure flow-capture to write out files on a period that is (or is
   divisible by) your snmp collection period
3) collect snmp statistics on the same interfaces your flows are in/out
4) treat all flow data as percentages of the time period, use your snmp
   statistics to scale using those percentages

> Can flow-report treat cases like this?

not automatically.

-- 
- bill fumerola / billf at FreeBSD.org