netflow tools - Jun 2007 - variable delay for log

Hello,

 

         I am new to use flowd-0.9 to receive NetFlow v9 from Cisco router.
Everything seems to be working except that I noticed when the flowd process
is activated; there is a variable delay when the log file receives data. The
delay is less than half an hour but usually nearly half an hour.

 

My configuration is very simple:

 

logfile "/mnt/sda5/flowd"

listen on 0.0.0.0:2010

flow source 202.112.60.1

store ALL

 

The environment is RedHat 9.0.

 

Does any one know why does this variable delay occur? 

Thanks very much!

         

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://lists.mindrot.org/pipermail/netflow-tools/attachments/20070606/b3e1fb1b/attachment.html

On Wed, 6 Jun 2007, ?????? wrote:
>          I am new to use flowd-0.9 to receive NetFlow v9 from Cisco router.
> Everything seems to be working except that I noticed when the flowd process
> is activated; there is a variable delay when the log file receives data.
The
> delay is less than half an hour but usually nearly half an hour.
The delay occurs because your router will only send flows when they expire
from its cache, which can be infrequent especially if your router is not 
busy. You can tweak this on your router by issuing commands like the 
following:

ip flow-cache timeout active 5

This will cause your router to expire flows every five minutes.