Subject: Speeding up flowscan
From: Maarten van Gelder (mvgelder@VT.EDU)
Date: Wed Nov 07 2001 - 16:23:22 CST
Hi, I am running Flowcan 1.006 on a dual pentium III (700MHz) box with FreeBSD 4.2, and am running into a performance issue. Two routers are sending flows to this box. A five minute flows file can be over 100 MB in size. These files take a lot more than 5 minutes to process, as shown in this excerpt from the flowscan log file 2001/11/07 16:55:21 flowscan-1.020 CampusIO: Cflow::find took 629 wallclock secs (617.81 usr + 2.91 sys = 620.72 CPU) for 100296955 flow file bytes, flow hit ratio: 1793462/1823581 Suggestions on how to speed up flowscan are high appreciated. Is it feasible to process this many flows on my hardware? Maarten. M. F. van Gelder Network Analyst Communications Network Services Virginia Polytechnic Institute & State University 1700 Pratt Dr, Blacksburg VA 24061 Voice: (540)231-4146; Fax: (540)231-3928; E-mail: mvgelder@vt.edu -- Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body Unsubscribe mailto:majordomo@net.doit.wisc.edu and say "unsubscribe flowscan" in message body Archive http://net.doit.wisc.edu/~plonka/list/flowscan/archive/
This archive was generated by hypermail 2b25 : Wed Nov 07 2001 - 16:25:49 CST