Caligare NetFlow - Knowledgebase
Search:     Advanced search
Browse by category:
Glossary | Contact Us

What are the optimal netflow aging values?

Add comment
Views: 3114
Votes: 0
Comments: 0

We suggest configure long aging time on 300 sec and normal aging time to 60 sec. Aging time is critical for network anomalies detection. in case that you are using netflow only for billing purposes, you can keep aging in the default.

The following IOS commands break up flows into shorter segments:

router(config)# ip flow-cache timeout active 5
router(config)# ip flow-cache timeout inactive 60

The following commands set up aging on native IOS device:

L3switch(config)# mls aging long 300
L3switch(config)# mls aging normal 60

The following commands set up agin on CatOS device:

switch> (enable) set mls agingtime long 304
switch> (enable) set mls agingtime 64
Also read
document What is diference between normal, fast and long mls aging?
document What is netflow table capacity on Cisco?

Others in this Category
document I'm seeing all in traffic passing through interface, but no out traffic.
document I would like to get NetFlow information from individual layer 2 switch ports.
document What is difference between "ip flow ingress" and "ip route-cache flow"?
document What means "flow mask" in the mls configuration?
document I configured NetFlow on Cat6500, but application shows only a few MBytes, whereas it should have been several GBytes.
document I have interface Vlan2 with record ip route-cache flow, but I have never seen traffic of this interface, although, other VLAN interfaces present in statistics.
document NetFlow on a Cisco 4500 series. Do I need a NetFlow services card?
document Can I use a bridged IP traffic NetFlow on PFC3A?
document Is NetFlow version 9 supported on 3620? Where can I find the document to see the supported devices?
document When I run show ip flow top-talkers I see null destination interface. What does null interface mean?
document How can I enable netflow on Cisco 3550 or Cisco 3750 devices?
document Is it possible to use the vrf interface as source of netflow packets?
document I'm seeing a WARNING: TCAM request associate message... What is it mean?
document What means "TCAM Utilization" and "ICAM Utilization"?
document What is netflow table capacity on Cisco?
» More articles



RSS