IP Flow Cache Timeout values

IP Flow Cache Timeout values

Hello Community,

Can someone please recommend appropriate cache timeout values.

I have read the following:

ip flow-cache timeout active 1

Breaks up long-lived flows into 1-minute fragments. You can choose any number of minutes between 1 and 60. If you leave it at the default of 30 minutes your traffic reports will have spikes.

It is important to set this value to 1 minute in order to generate alerts and viewtroubleshooting data.

ip flow-cache timeout inactive 15 Ensures that flows that have finished are periodically exported. The default value is 15 seconds. You can choose any number of seconds between 10 and 600. However, if you choose a value greater than 250 seconds, NetFlow Analyzer may report traffic levels that are too low.


Would you go along with the above? Also, is the above just for version 5

In addition, I was told on this forum to change the active timeout on the monitor to 60Secs. Is the inactive timeout correct at 15Secs


Flow Monitor FlowMonitor1:
  Description:       User defined
  Flow Record:       FlowRecord1TopT
  Flow Exporter:     NETFLOW-TO-ME
  Cache:
    Type:              normal
    Status:            allocated
    Size:              32768 entries / 2097276 bytes
    Inactive Timeout:  15 secs
    Active Timeout:    60 secs
    Update Timeout:    1800 secs











Cheers

Carlton

                New to ADSelfService Plus?