For Business deployments, in addition to the statistics types with a small number of
records; Comprehensive, Volume, Unknown, and Volume Special Study, there are also
statistics types with a larger number of records; TCP Performance, and RTP
(Voice/Audio/Video). The main distinction is whether or not the TCP/RTP statistics types
use the default enabled counters, or if all counters have been enabled. Enabling all of the
TCP/RTP counters increases the amount of memory used by the 5620 SAM Cflowd
Auxiliary. Aside from the incoming FPS (Flows Per Second) that the 5620 SAM Cflowd
Auxiliary can process, the other main factor putting pressure on the 5620 SAM Cflowd
Auxiliary is the memory used by the number of unique objects/records (or unique routes,
i.e. the # of output records the 5620 SAM Cflowd Auxiliary produces in the IPDR files)
in 5620 SAM Cflowd Auxiliary memory at any one time. And finally the interval size –
the smaller the aggregation interval, the greater percentage of the next interval time will
overlap with the transfer time of the previous interval – during this time the 5620 SAM
Cflowd Auxiliary must store objects in memory from two different intervals.
Comprehensive statistics types are fixed at 60 minute intervals.
A unique object/route for TCP/Volume records in the business context is:
SAP, App/AppGroup, Interval ID, Src Group ID, Source Interface ID, Dest Group ID,
Dest Interface ID
A Volume record will also have a direction field. Volume records coming from the router
to the 5620 SAM Cflowd Auxiliary will result in two output records in the IPDR files
(one for each direction). For TCP, two incoming records from the 5620 SAM Cflowd
Auxiliary (one for each direction) will be combined by the 5620 SAM Cflowd Auxiliary
into a single output TCP record in the IPDR files.
A unique object/route for COMPREHENSIVE record in the business context is:
SAP, App/AppGroup, Interval ID, Src Group ID, Source Interface ID, Dest Group ID,
Dest Interface ID
and either a hostname field, or three device identification fields.
A unique object/route for RTP is defined as:
Every single flow into the 5620 SAM Cflowd Auxiliary is a unique route and an equal
number of flow records are produced in the IPDR file. The expected number of RTP
records sent from 7750 SR Routers is expected to be a small percentage of the total flows
(i.e. <5% total flows TCP/VOL/RTP)
Scaling
Scaling guidelines for Cflowd statistics collection
Scaling guidelines for Cflowd statistics collection
....................................................................................................................................................................................................................................
....................................................................................................................................................................................................................................
5620 SAM
3HE-09809-AAAG-TQZZA 13.0 R7
Issue 1
December 2015
6-23