Interesting netflow entry

Tue Feb 7 18:33:10 UTC 2006

On Tue, 7 Feb 2006, Bill Nash wrote:

> Erm, that seems kind of low. Flow volume for two 6509s in what I consider
> a small to medium size hosting site, with about 6+ gigs of differentiated
> egress generates more than 8 to 9 *thousand* flows per second, and that's
> after discard incomplete tcp flows (port scans, half open syns, etc.)
>
> Are you sure you're getting everything?

he did previously state he was only using about 120mbps... and it'd depend
upon his/your sample rates as well...