[SAGE] Cisco NetFlow Accounting Load

[Ross West <westr@linepoint.com>]

Hi everyone,

I've been wanting to start playing around with the Cisco NetFlow
accounting to use with various tools (specifically FlowScan - a tool
looks way too interesting - check it out at:
http://www.rrdtool.com/rrdworld/flowscan.html and also then looking to
branch it out and use it for IDS purposes..)

I've found out most of the information about requirements for the
machines that run the cflowd process and have to do the processing,
but what I haven't been able to find is what kind of load NetFlow
accounting puts on the router.

Does anyone have any experience in turning this feature on, and what
to expect in terms of memory usage/cpu load?  The aggregate bandwidth
usage on our router is around 40-50 mbps.

Any insights would be greatly appreciated and I'll post a summary if
you don't want to put it back to the list.


Cheers,
  Ross.

--
  Ross West                 mailto:westr@linepoint.com