Andrisoft Knowledgebase
Search:     Advanced search
Browse by category:
Contact Us

What are the optimal netflow aging values?

Votes: 0

We suggest configure long aging time on 120 sec and normal aging time to 60 sec. Aging time is critical for network anomalies detection. 

The following IOS commands break up flows into shorter segments:

router(config)# ip flow-cache timeout active 2
router(config)# ip flow-cache timeout inactive 60

The following commands set up aging on native IOS device:

L3switch(config)# mls aging long 120
L3switch(config)# mls aging normal 60

The following commands set up agin on CatOS device:

switch> (enable) set mls agingtime long 128
switch> (enable) set mls agingtime 64
Others in this Category
document How can I enable netflow on Cisco 3550 or Cisco 3750 devices?
document Unable to change flowmask error message on Cisco 6500
document I configured NetFlow on Cat6500, but application shows only a few MBytes, whereas it should have been several GBytes.
document When I run show ip flow top-talkers I see null destination interface. What does null interface mean?
document What means flow mask in the mls configuration?
document How can I configure netflow on Cisco?
document All IN traffic passing through interface, but no OUT traffic
document What is difference between ip flow ingress and ip route-cache flow?
document What is diference between normal, fast and long mls aging?
document Is it possible to use the vrf interface as source of netflow packets?
document NetFlow on a Cisco 4500 series. Do I need a NetFlow services card?
document Can I use a bridged IP traffic NetFlow on PFC3A?
document What is netflow table capacity on Cisco?
document WARNING: TCAM request associate message... What is it mean?
document What means TCAM Utilization and ICAM Utilization?