ng_netflow and router performance question

[Alexander Motin]

Hi.

I think, that there is not very good hash function now used in 
ng_netflow in traffic aggregation. So if
 > ip-addr varies from 10.60.0.0 to 10.60.100.255
means than destination address will vary in this range and all other 
parameters is remain constant then it will be worst case possible.

Try other traffic pattern (as example random ports or src addrs) or wait 
for some time. We have discussed it with author and hi will probably 
change this function.

-- 
Alexander Motin