
<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Counting packets gives no insight, not even per VLAN.<div class="">I would rather get a good free (or cheap) sFlow probe, like InMons.</div><div class="">There you can get graphs in anyway you like it. Per port, Per VLAN etc.</div><div class="">And it also gives graphs and insight to application layer (i.e. L3 and L4 headers in the packet).</div><div class="">And sFlow is supported in Arista gear.</div><div class=""><br class=""></div><div class="">Just my 50 cent</div><div class="">Patrik</div><div class=""><br class=""></div><div class=""><div><br class=""><blockquote type="cite" class=""><div class="">On 9 Dec 2019, at 15:35, Mike Hammett <<a href="mailto:arista-nsp@ics-il.net" class="">arista-nsp@ics-il.net</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div style="caret-color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; font-family: arial, helvetica, sans-serif; font-size: 10pt;" class="">Except VLANs are touched by the layer 2 switch and routed accordingly. Using the mail\post office analogy, it would be like a suite or apartment number at a given address.<div class=""><br class=""></div><div class=""><br class=""></div><div class="">I'm not going to try to force Arista into my need. If Arista doesn't do it, then I'll move on. It doesn't seem like they do.<br class=""><br class=""><div class=""><span name="x" class=""></span><br style="font-family: "times new roman"; font-size: 12px; line-height: normal;" class=""><br style="font-family: "times new roman"; font-size: 12px; line-height: normal;" class=""><span style="font-family: "times new roman"; font-size: 12px; line-height: normal;" class="">-----</span><br style="font-family: "times new roman"; font-size: 12px; line-height: normal;" class=""><span style="font-family: "times new roman"; font-size: 12px; line-height: normal;" class="">Mike Hammett</span><br style="font-family: "times new roman"; font-size: 12px; line-height: normal;" class=""><a href="http://www.ics-il.com/" rel="nofollow%20noopener%20noreferrer nofollow noopener noreferrer" target="_blank" style="font-family: "times new roman"; font-size: 12px; line-height: normal;" class="">Intelligent Computing Solutions</a><br style="font-family: "times new roman"; font-size: 12px; line-height: normal;" class=""><a href="https://www.facebook.com/ICSIL" rel="nofollow%20noopener%20noreferrer nofollow noopener noreferrer" target="_blank" style="font-family: "times new roman"; font-size: 12px; line-height: normal;" class=""><img src="http://www.ics-il.com/images/fbicon.png" class=""></a><a href="https://plus.google.com/+IntelligentComputingSolutionsDeKalb" rel="nofollow%20noopener%20noreferrer nofollow noopener noreferrer" target="_blank" style="font-family: "times new roman"; font-size: 12px; line-height: normal;" class=""><img src="http://www.ics-il.com/images/googleicon.png" class=""></a><a href="https://www.linkedin.com/company/intelligent-computing-solutions" rel="nofollow%20noopener%20noreferrer nofollow noopener noreferrer" target="_blank" style="font-family: "times new roman"; font-size: 12px; line-height: normal;" class=""><img src="http://www.ics-il.com/images/linkedinicon.png" class=""></a><a href="https://twitter.com/ICSIL" rel="nofollow%20noopener%20noreferrer nofollow noopener noreferrer" target="_blank" style="font-family: "times new roman"; font-size: 12px; line-height: normal;" class=""><img src="http://www.ics-il.com/images/twittericon.png" class=""></a><br style="font-family: "times new roman"; font-size: 12px; line-height: normal;" class=""><a href="http://www.midwest-ix.com/" rel="nofollow%20noopener%20noreferrer nofollow noopener noreferrer" target="_blank" style="font-family: "times new roman"; font-size: 12px; line-height: normal;" class="">Midwest Internet Exchange</a><br style="font-family: "times new roman"; font-size: 12px; line-height: normal;" class=""><a href="https://www.facebook.com/mdwestix" rel="nofollow%20noopener%20noreferrer nofollow noopener noreferrer" target="_blank" style="font-family: "times new roman"; font-size: 12px; line-height: normal;" class=""><img src="http://www.ics-il.com/images/fbicon.png" class=""></a><a href="https://www.linkedin.com/company/midwest-internet-exchange" rel="nofollow%20noopener%20noreferrer nofollow noopener noreferrer" target="_blank" style="font-family: "times new roman"; font-size: 12px; line-height: normal;" class=""><img src="http://www.ics-il.com/images/linkedinicon.png" class=""></a><a href="https://twitter.com/mdwestix" rel="nofollow%20noopener%20noreferrer nofollow noopener noreferrer" target="_blank" style="font-family: "times new roman"; font-size: 12px; line-height: normal;" class=""><img src="http://www.ics-il.com/images/twittericon.png" class=""></a><br style="font-family: "times new roman"; font-size: 12px; line-height: normal;" class=""><a href="http://www.thebrotherswisp.com/" rel="nofollow%20noopener%20noreferrer nofollow noopener noreferrer" target="_blank" style="font-family: "times new roman"; font-size: 12px; line-height: normal;" class="">The Brothers WISP</a><br style="font-family: "times new roman"; font-size: 12px; line-height: normal;" class=""><a href="https://www.facebook.com/thebrotherswisp" rel="nofollow%20noopener%20noreferrer nofollow noopener noreferrer" target="_blank" style="font-family: "times new roman"; font-size: 12px; line-height: normal;" class=""><img src="http://www.ics-il.com/images/fbicon.png" class=""></a><a href="https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg" rel="nofollow%20noopener%20noreferrer nofollow noopener noreferrer" target="_blank" style="font-family: "times new roman"; font-size: 12px; line-height: normal;" class=""><img src="http://www.ics-il.com/images/youtubeicon.png" class=""></a><span name="x" class=""></span><br class=""></div><hr id="zwchr" class=""><div style="font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica, Arial, sans-serif; font-size: 12pt;" class=""><b class="">From:<span class="Apple-converted-space"> </span></b>"Doug McIntyre" <<a href="mailto:merlyn@geeks.org" class="">merlyn@geeks.org</a>><br class=""><b class="">To:<span class="Apple-converted-space"> </span></b><a href="mailto:arista-nsp@puck.nether.net" class="">arista-nsp@puck.nether.net</a><br class=""><b class="">Sent:<span class="Apple-converted-space"> </span></b>Monday, December 9, 2019 8:32:07 AM<br class=""><b class="">Subject:<span class="Apple-converted-space"> </span></b>Re: [a-nsp] VLAN in SNMP Interface Table<br class=""><br class=""><br class="">I'd count the packets exiting a port as doing some work.<br class=""><br class="">Maybe a better analogy would be you have a bunch of envelopes sent<br class="">through the post office. You are asking a counter to see how many<br class="">pieces of paper are in each envelope. The post office only delivers<br class="">the envelopes, so we have a total count of envelopes. Only if we need<br class="">to burst open the envelopes (layer-3) and start routing the pieces of paper<br class="">based on their top tag, will we have counters on them. As long as the<br class="">post office keeps forwarding intact envelopes (ie. layer-2), we won't have<br class="">visibility into inside.<br class=""><br class=""><br class=""><br class=""><br class="">On Mon, Dec 09, 2019 at 07:40:00AM -0600, Mike Hammett wrote:<br class="">> If the first paragraph were true, we'd never have port counters on a switch.<span class="Apple-converted-space"> </span><br class="">><span class="Apple-converted-space"> </span><br class="">><span class="Apple-converted-space"> </span><br class="">><span class="Apple-converted-space"> </span><br class="">><span class="Apple-converted-space"> </span><br class="">> -----<span class="Apple-converted-space"> </span><br class="">> Mike Hammett<span class="Apple-converted-space"> </span><br class="">> Intelligent Computing Solutions<span class="Apple-converted-space"> </span><br class="">><span class="Apple-converted-space"> </span><br class="">> Midwest Internet Exchange<span class="Apple-converted-space"> </span><br class="">><span class="Apple-converted-space"> </span><br class="">> The Brothers WISP<span class="Apple-converted-space"> </span><br class="">><span class="Apple-converted-space"> </span><br class="">> ----- Original Message -----<br class="">><span class="Apple-converted-space"> </span><br class="">> From: "Doug McIntyre" <<a href="mailto:merlyn@geeks.org" class="">merlyn@geeks.org</a>><span class="Apple-converted-space"> </span><br class="">> To:<span class="Apple-converted-space"> </span><a href="mailto:arista-nsp@puck.nether.net" class="">arista-nsp@puck.nether.net</a><span class="Apple-converted-space"> </span><br class="">> Sent: Monday, December 9, 2019 7:36:05 AM<span class="Apple-converted-space"> </span><br class="">> Subject: Re: [a-nsp] VLAN in SNMP Interface Table<span class="Apple-converted-space"> </span><br class="">><span class="Apple-converted-space"> </span><br class="">> On Sun, Dec 08, 2019 at 06:02:47PM -0600, Mike Hammett wrote:<span class="Apple-converted-space"> </span><br class="">> > This looks like it's only on layer 3 interfaces, which doesn't do me a whole lot of good.<span class="Apple-converted-space"> </span><br class="">><span class="Apple-converted-space"> </span><br class="">><span class="Apple-converted-space"> </span><br class="">> I don't know of any hardware that keeps track of layer-2 VLAN packet<span class="Apple-converted-space"> </span><br class="">> counts going through the switch. Generally, stats are updated on times<span class="Apple-converted-space"> </span><br class="">> when switches have to _do_ something. Forwarding along layer-2 is<span class="Apple-converted-space"> </span><br class="">> usually done in ASICs and the switch doesn't do anything special for<span class="Apple-converted-space"> </span><br class="">> decoding the VLAN headers. OOTH, doing a layer-3 routing termination<span class="Apple-converted-space"> </span><br class="">> is doing something, which is where I measure everything, on the<span class="Apple-converted-space"> </span><br class="">> layer-3 edge. And every type of hardware I touch can monitor that.<span class="Apple-converted-space"> </span><br class="">><span class="Apple-converted-space"> </span><br class="">> As posted before, if you need this sort of thing, you'll probably have<span class="Apple-converted-space"> </span><br class="">> to go to sflow type collectors in order to get what you want. Or<span class="Apple-converted-space"> </span><br class="">> consider making your network do layer-3 VLAN terminations somewhere so<span class="Apple-converted-space"> </span><br class="">> that you can measure it.<span class="Apple-converted-space"> </span><br class="">><span class="Apple-converted-space"> </span><br class="">> Perhaps there is some weird EVPN/vxlan setup you could make that the<span class="Apple-converted-space"> </span><br class="">> switch will have to do punting of traffic out to a VTEP, and you could<span class="Apple-converted-space"> </span><br class="">> measure those counts, but I have zero experience monitoring such a setup.<span class="Apple-converted-space"> </span><br class="">><span class="Apple-converted-space"> </span><br class="">> --<span class="Apple-converted-space"> </span><br class="">> arista-nsp mailing list<span class="Apple-converted-space"> </span><br class="">><span class="Apple-converted-space"> </span><a href="mailto:arista-nsp@puck.nether.net" class="">arista-nsp@puck.nether.net</a><span class="Apple-converted-space"> </span><br class="">><span class="Apple-converted-space"> </span><a href="https://puck.nether.net/mailman/listinfo/arista-nsp" class="">https://puck.nether.net/mailman/listinfo/arista-nsp</a><span class="Apple-converted-space"> </span><br class="">><span class="Apple-converted-space"> </span><br class="">--<span class="Apple-converted-space"> </span><br class="">arista-nsp mailing list<br class=""><a href="mailto:arista-nsp@puck.nether.net" class="">arista-nsp@puck.nether.net</a><br class=""><a href="https://puck.nether.net/mailman/listinfo/arista-nsp" class="">https://puck.nether.net/mailman/listinfo/arista-nsp</a><br class=""></div><br class=""></div></div><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">--<span class="Apple-converted-space"> </span></span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">arista-nsp mailing list</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><a href="mailto:arista-nsp@puck.nether.net" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">arista-nsp@puck.nether.net</a><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><a href="https://puck.nether.net/mailman/listinfo/arista-nsp" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">https://puck.nether.net/mailman/listinfo/arista-nsp</a></div></blockquote></div><br class=""></div></body></html>