From 57c06dcd78f9b711c4fb46e6657b0a496059a685 Mon Sep 17 00:00:00 2001 From: Viacheslav Hletenko Date: Fri, 17 Mar 2023 12:38:27 +0000 Subject: T5086: Add sFlow drop-monitor-limit option hsflowd will export the headers of dropped packets (along with the name of the function in the Linux kernel where that skb was dropped) as part of the standard sFlow feed. This measurement complements the sFlow packet sampling and counter-telemetry well because it provides visibility into the traffic that is not flowing. Very helpful for troubleshooting. The limit (a rate limit max of N drops per second sent out in the sFlow datagrams) is the parameter you would set in the CLI. set system sflow drop-monitor-limit 50 --- data/templates/sflow/hsflowd.conf.j2 | 3 +++ 1 file changed, 3 insertions(+) (limited to 'data') diff --git a/data/templates/sflow/hsflowd.conf.j2 b/data/templates/sflow/hsflowd.conf.j2 index 7ce6554d7..94f5939be 100644 --- a/data/templates/sflow/hsflowd.conf.j2 +++ b/data/templates/sflow/hsflowd.conf.j2 @@ -25,4 +25,7 @@ sflow { pcap { dev={{ iface }} } {% endfor %} {% endif %} +{% if drop_monitor_limit is vyos_defined %} + dropmon { limit={{ drop_monitor_limit }} start=on sw=on hw=off } +{% endif %} } -- cgit v1.2.3