Packet Loss via Netflow: MFSN
Posted in NetFlow, NetFlow Analyzer, Network Health Report, Network Traffic Analysis, Network Traffic Monitor, Scrutinizer on December 1st, 2009 by Jo-G
How do you know if the NetFlow collector is saving or even getting all of the NetFlow datagrams that are being sent to it or that it is receiving? It is important to know if any flows are missing.
Why do we care?
This is a great question. We care because a loss of flow exports is usually caused by one of three things:
- 1. The network dropped some packets
2. The router can’t keep up
3. The NetFlow receiver / collector can’t keep up
NetFlow sequence numbers are becoming increasingly important. When building a NetFlow collector it is important that the engine scales while staying accountable. If you look at the NetFlow v9 packet format you will notice something called the package_sequence.
