[Flow-tools] flow-tag

Benjamin Bach benjaoming at gmail.com
Thu Sep 20 07:07:55 EDT 2007


Hi!

I'm trying to work out whether or not I should use flow-tag to group
different customer subnets. I have encountered the following questions from
reading the man page:

Multiple actions may match and set tags on the same flow.  Note that
> listing many actions will cause tags to be applied in O(actions) time.
> The actions try to run in O(1) time.  For example if 10 prefixes are
> listed in a single action it will take about the same CPU as if 100
> prefixes are used.  Listing 100 actions will require 100 times the
> CPU as 1 action.


Does this mean that using flow-tag to tag all you subnets won't give you any
performance boost compared to e.g. just filtering your flows per subnet and
generating a report of this?

Also this example worries me:

 match 128.146/16 set-destination     0x010001


Does it mean that  the destination address will be overwritten?

Thanks for reading!

All the best,
Benjamin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.splintered.net/pipermail/flow-tools/attachments/20070920/194d0b90/attachment-0001.htm


More information about the Flow-tools mailing list