Description

Customer has an issue with an MX960 + SPC3 thats sending jflow logs (with nat translations) to an external collector. The MX is sending the templates too frequently and seems to cause the flow collector to crash.

Customer has tried change the template refresh rate, but even when it high (like 300 seconds), the collector is still getting templates every 7-8 seconds.

Symptoms

Too many JFLOW-log(NAT) template packets are sent to collector and causes the collector to crash.

Solution

This is an expected behavior.

By design, jflow-log template-profile refresh-rate has 2 knobs, packets<total number of packets sent to the collector> and timer<seconds>. Either of them is reached, the template will be sent.

 

Modification History

2024-09-17 : Article Created