Community discussions

MikroTik App
 
rpingar
Long time Member
Long time Member
Topic Author
Posts: 592
Joined: Fri May 28, 2004 2:46 pm
Location: Italy

netflow sampling rate

Wed Sep 21, 2022 6:39 pm

how to configure the sampling parameters to get 1/5000 netflow sampling rate?
it is very difficult to understand from you manual where:
sampling-interval (integer; Default: 0) The number of packets that are consecutively sampled.
sampling-space (integer; Default: 0) The number of packets that are consecutively omitted.
/ip/traffic-flow/set packet-sampling=yes sampling-interval=2222 sampling-space=1111
2222 packet consecutive packets will be sampled and then 1111 will be omitted. Then the sampling cycle repeats in such a manner.

regards
Ros
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 11967
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: netflow sampling rate

Wed Sep 21, 2022 6:48 pm

/ip/traffic-flow/set packet-sampling=yes sampling-interval=1 sampling-space=4999 ???
 
rpingar
Long time Member
Long time Member
Topic Author
Posts: 592
Joined: Fri May 28, 2004 2:46 pm
Location: Italy

Re: netflow sampling rate

Thu Sep 22, 2022 9:13 am

/ip/traffic-flow/set packet-sampling=yes sampling-interval=1 sampling-space=4999 ???
not working, getting the same amount of rawflow then when "no sampling"
thx
 
neos14
just joined
Posts: 7
Joined: Thu Feb 09, 2012 2:29 pm

Re: netflow sampling rate

Thu Dec 29, 2022 7:49 pm

What is actually packet-sampling from mikrotik point of view? From their help page it is not clear at all.
I guess routeros collects flows for
packet sampling interval
and then send them to the target. But what is then 'packet sampling space' parameter?
 
netbus
Frequent Visitor
Frequent Visitor
Posts: 60
Joined: Mon Sep 04, 2017 12:42 pm

Re: netflow sampling rate

Fri Jan 27, 2023 10:24 pm

I am also interested. Can somebody explain?
 
kerfuffle
just joined
Posts: 15
Joined: Wed Feb 22, 2023 6:50 am
Location: San Francisco, CA
Contact:

Re: netflow sampling rate

Thu Feb 23, 2023 10:19 am

Same in ROS7.7 - I tried Interval 1, Space 4999 to try and get 1 in 5000, but it's clearly wrong - even raw output to my collector with no sampling doesn't seem to make much sense. I see traffic spikes reported that are bigger than the interfaces the traffic is traversing (25Gbps+ flows on 10Gbps ports etc)

There's also a bug in the Mikrotik implementation here (https://github.com/akvorado/akvorado/issues/417 https://github.com/netsampler/goflow2/issues/113). It doesn't help that the sampling rate isn't advertised properly along with the data being sent, so at least the other side could know how to interpret.

I'm using Akvorado as my Netflow system.
 
guipoletto
Member Candidate
Member Candidate
Posts: 195
Joined: Mon Sep 19, 2011 5:31 am

Re: netflow sampling rate

Mon May 08, 2023 7:21 am

I'm in the same situation, Akvorado discards the Mikrotik flows as invalid
 
jo2jo
Forum Guru
Forum Guru
Posts: 1003
Joined: Fri May 26, 2006 1:25 am

Re: netflow sampling rate

Wed May 31, 2023 10:12 pm

I'm in the same situation, Akvorado discards the Mikrotik flows as invalid
Im seeing the exact same issue with Akvorado as well (when using a mikrotik ros v6.49.6 or v7.6 to send Netflow v5 to Akvorado :2055).

it gets marked as invalid flow, and dropped as a result (so no data shows up).
hoping this can get fixed in ros.

Who is online

Users browsing this forum: lurker888 and 56 guests