Caligare NetFlow - Knowledgebase
Search:     Advanced search
Browse by category:
Glossary | Contact Us

What are the optimal netflow aging values?

Add comment
Views: 3080
Votes: 0
Comments: 0

We suggest configure long aging time on 300 sec and normal aging time to 60 sec. Aging time is critical for network anomalies detection. in case that you are using netflow only for billing purposes, you can keep aging in the default.

The following IOS commands break up flows into shorter segments:

router(config)# ip flow-cache timeout active 5
router(config)# ip flow-cache timeout inactive 60

The following commands set up aging on native IOS device:

L3switch(config)# mls aging long 300
L3switch(config)# mls aging normal 60

The following commands set up agin on CatOS device:

switch> (enable) set mls agingtime long 304
switch> (enable) set mls agingtime 64
Also read
document What is diference between normal, fast and long mls aging?
document What is netflow table capacity on Cisco?

Others in this Category
document What means "flow mask" in the mls configuration?
document I'm seeing a WARNING: TCAM request associate message... What is it mean?
document When I run show ip flow top-talkers I see null destination interface. What does null interface mean?
document I configured NetFlow on Cat6500, but application shows only a few MBytes, whereas it should have been several GBytes.
document How can I enable netflow on Cisco 3550 or Cisco 3750 devices?
document On which Cisco device is netflow supported?
document How can I configure netflow on Cisco?
document What is netflow table capacity on Cisco?
document Can I use a bridged IP traffic NetFlow on PFC3A?
document Cisco ASA and NetFlow
document EARL NetFlow error messages
document I'm seeing all in traffic passing through interface, but no out traffic.
document What means "TCAM Utilization" and "ICAM Utilization"?
document "Unable to change flowmask" error message on Cisco 6500
document I have interface Vlan2 with record ip route-cache flow, but I have never seen traffic of this interface, although, other VLAN interfaces present in statistics.
» More articles



RSS