Hi
We have installed netflow analyzer 8600 to centos 5.5 64bit os. database tuning is made according 4gig ram
Our L3 switch (catalyst 6500/sup32 with adventerprisek9_wan-mz.122-33.SXI2a) sends flows correctly to server.
When we send version 5 with AS info analyzer stops collecting data after 5-15 minutes
When we send version 5 data without AS info the collecting time can be 1-5 hour.
In both cases analyzer reveives about 3600 flow per second.
When we switch to version 9, only ~ 10 flows is received and incomplete info displayed
In cisco we have following configuration:
no mls acl tcam share-global
mls aging long 64
mls aging normal 32
mls netflow interface
mls flow ip interface-full
ip flow-export source Vlan10
ip flow-export version 5
ip flow-export destination xxx.xxx.xxx.xxx 9996
ip flow-cache timeout active 1
ip flow-cache timeout inactive 15
every vlan have ip flow ingress enabled.
does anyone have any clue about the problem ? is 3600flows too much for analyzer ? or is version 9 buggi ? or 64bit OS can make problems ?