Export Performance

Template Ingress Rate (NetFlow) Export Rate (ZMQ)
Default 12'000 packets/second (avg 19 records/packet) 230'000 flows/second
@NTOPNG@ 8'500 packets/second (avg 19 records/packet) 160'000 flows/second

System Configuration

With indexing and PCAP compression enabled:

  • OS: nProbe™ 8.7 Pro
  • OS: CentOS Linux 7.6
  • CPU: Intel E3-1230 v5 @ 3.40GHz
  • Incoming Flows in NetFlow v9 Format
  • ZMQ Export (TLV)
  • Internal Cache Disabled (guarantees transparent incoming flow forwarding from nProbe)
  • Command used:
    nprobe -i none -n none –collector-port 2055 –zmq tcp://192.168.1.1:5556 –disable-cache [-T @NTOPNG@]
  • No flow storage on database or disk - only forwarding to ntopng as collector via ZMQ.
  • The bandwidth required for exporting flow information over ZMQ is <30 Mbit/sec for 10’000 flows/second, this number can be scaled based on the actual number of flows. For example, when processing 1 Gbit/s average internet traffic, the bandwidth required is <5 Mbit/s as peak (note: this highly depends on traffic type).
Previous
Previous

Probe Mode

Next
Next

IPS Mode