sflow

That approach leads to statistical bias in the results. However the analysis is usually not very sensitive to sampling rate, so can you explain more about the problem? If your...

To run a calibration test, it works well to set up a constant flow with a moderate traffic level. For example, if there is a target IP you can ping,...

Yes, I would expect TCP-offload to affect it. Are you seeing 64KB packet-samples, or do the samples disappear altogether? If you suspect that hsflowd is rejecting the samples somehow, then...

Thanks for looking at this. When the code considers vda and vda1 counters is there a clear difference in the major and minor numbers, or do we need to pull...

Thanks! However I think it's better to just request that the port osIndex be remapped. I made this change in a new branch called "v2.0" and tagged a release 2.0.56-1...

The underlying mechanism for discovering Linux interfaces (known as adaptors) only runs periodically, usually every minute. That happens in readInterfaces.c. So at the point where the interface breakout command has...

Thanks. I still think there is a corner case that needs attention: I think counter-samples from ifIndex=259 would not have appeared until the next packet-sample to/from that port. For now...

Can I ask you to test this against the master branch too? If you need there to be a tag or release then let me know. It would be helpful...

It sounds like you just need an sFlow collector that will decode these packets. I am not familiar with the "flow render" app. Which tool is that? (Are you referring...

Something like: sudo tcpdump -i any -s 0 -c 10 -w sflow.pcap udp port 6343