index.asciidoc in logstash-codec-netflow-3.6.0

- old
+ new

@@ -37,18 +37,19 @@
 |Netflow exporter         | v5 | v9 | IPFIX | Remarks
 |Barracuda Firewall       |    |    |   y   |
 |Cisco ASA                |    | y  |       |  
 |Cisco ASR                |    | y  |       |  
 |Cisco IOS 12.x           |    | y  |       |  
+|Cisco ISR w/ HSL         |    | n  |       | https://github.com/logstash-plugins/logstash-codec-netflow/issues/93
 |Cisco WLC                |    | y  |       |
 |Citrix Netscaler         |    |    |   y   | Still some unknown fields, labeled netscalerUnknown<id>
 |fprobe                   |  y |    |       |
 |Fortigate FortiOS        |    | y  |       |
 |ipt_NETFLOW              |  y | y  |   y   |
 |Juniper MX80             |  y |    |       | SW > 12.3R8
 |Mikrotik                 |  y |    |   y   | http://wiki.mikrotik.com/wiki/Manual:IP/Traffic_Flow
-|nProbe                   |  y | y  |   y   |  
+|nProbe                   |  y | y  |   y   | L7 DPI fields now also supported
 |OpenBSD pflow            |  y | n  |   y   | http://man.openbsd.org/OpenBSD-current/man4/pflow.4
 |Softflowd                |  y | y  |   y   | IPFIX supported in https://github.com/djmdjm/softflowd
 |Streamcore Streamgroomer |    | y  |       |
 |Ubiquiti Edgerouter X    |    | y  |       | With MPLS labels
 |VMware VDS               |    |    |   y   | Still some unknown fields
@@ -66,27 +67,25 @@
     codec => netflow
   }
 }
 --------------------------
 
-For high-performance production environments the configuration below will decode up to 6000 flows/sec on an 8 CPU instance. If your total flowrate exceeds 6000 flows/sec, you should use multiple Logstash instances.
+For high-performance production environments the configuration below will decode up to 15000 flows/sec on a dedicated 16 CPU instance. If your total flowrate exceeds 15000 flows/sec, you should use multiple Logstash instances.
 
-
 [source, ruby]
 --------------------------
 input {
   udp {
     port                 => 2055
-    receive_buffer_bytes => 16777216
     codec                => netflow
-    workers              => 6
+    receive_buffer_bytes => 16777216
+    workers              => 16
   }
 --------------------------
 
-Make sure to increase the Linux kernel receive buffer limit:
+To mitigate dropped packets, make sure to increase the Linux kernel receive buffer limit:
 
  # sysctl -w net.core.rmem_max=$((1024*1024*16))
-
 
 [id="plugins-{type}s-{plugin}-options"]
 ==== Netflow Codec Configuration Options
 
 [cols="<,<,<",options="header",]