Wondering if anyone has the same issue I am experiencing.
I have around 3000 MT’s in production, we use multiple Netflow products from various vendors.
But seem to have this issue from MT’s no matter what product is used.
What we find is Netflow from the MT’s send us very huge unbelievable totals.
We can see these totals in the raw flow before any processing takes place.
Some of our devices use RouterOS 6.39, some have been upgraded to 6.44 but the issue still remains.
Doesn’t matter which Netflow version is used V5 or V9 and IPFIX we still get very unbelievable totals.
As an example Netflow setup on an MT, with a 2M internet link can report totals of over 280G in a 15min period.
Anyone else seen this issue and perhaps has a fix?
The Netflow setups used are generally left default.
Tweaking any of these settings doesn’t seem to make a difference:
cache-entries: 256k
active-flow-timeout: 30m
inactive-flow-timeout: 15s
Can provide further diag is necessary.