Hi all, I have a customer who has a MPLS network for E/// Media Gateway (MGW) NB-AMR VoIP traffic. The packet size for the NB-AMR traffic is fixed size 110 bytes. During the high load period, it can reaches 450Kpps on a STM-1 link. The router platform is Cisco 12000 series, can the router generate 100% netflow data with such traffic load? Also can someone suggest a carrier class netflow collector for mobile service provider environment.
Thanks in advance.
Regards,
Steven Lee
Lee,
The question would be do you want a self contained appliance or a
piece of software? I have used Advent Network's Net Flow Analyzer.
There are others out there but I've had some decent amount of luck with
these guys and they have an "Enterprise" license that will many, many
(thousands?) interfaces.
For the traffic load and the number of flows/second I'm guessing
you'll need a really high end Linux box with lots and lots of disk
space.
There are open source netflow collectors too you could deal with if
cost is an issue or you have the talent on staff to maintain it.
Chuck
Hi all, the LC on 12000 series is 12000-SIP-601 (engine 5) with multiple STM-1 SPA card. As far as I know the engine 5 card cannot do 450Kpps on netflow. Since the STM-1 is mainly for NB-AMR traffic (95%), do you recommend the sampled netflow instead? Does anyone aware of the sampled netflow accuracy?
It depends on how many active flows you have at any one time. Also, I don't think the SIP-601 supports full netflow V5 in hardware, only V8, which is aggregated netflow, which may not be what you want. It does do V5/V9 sampled netflow in hardware. The sampled netflow on that platform is better than on say the 6500/7600, so I would just go with that.
Phil
Hi all, I have a customer who has a MPLS network for E/// Media Gateway (MGW) NB-AMR VoIP traffic. The packet size for the NB-AMR traffic is fixed size 110 bytes. During the high load period, it can reaches 450Kpps on a STM-1 link. The router platform is Cisco 12000 series, can the router generate 100% netflow data with such traffic load? Also can someone suggest a carrier class netflow collector for mobile service provider environment.
Forget full netflow with 12000. It is not supported....
Janos Mohacsi
Network Engineer, Research Associate, Head of Network Planning and Projects
NIIF/HUNGARNET, HUNGARY
Key 70EF9882: DEC2 C685 1ED4 C95A 145F 4300 6F64 7B00 70EF 9882
If you mean how well you can extrapolate "real" numbers from "samples" by
multiplying by the inverse sample rate, my (initial and somewhat limited)
testing showed a surprising correlation. A pretty good first
approximation.
Joe