Every time nfsen is restarted, a massive spike in traffic statistics occurs.

[mkoelewijn]

• NfSen: 1.3.11
• Nfdump: 1.7.4-4f409e9

Our configuration is as follows:

NfSen:

• 6 sources with 1/100 sampling (including 1 source receiving flows from 300+ different devices).

Every time nfsen is restarted, a massive spike in traffic statistics occurs. This is unfortunately messing up the graphs over time. Could this be because of the sampling and any idea how to fix this?

[phaag]

Hmm .. I could assume, that restarting fills up the socket buffer from the time creating until it is processed first. But this is just guessing. You may experiment to skip the first few packet from the socket read when restarting.