[c-nsp] Cat 6500 and counters

[Gert Doering]

Hi,

On Thu, Apr 28, 2005 at 10:27:54AM -0500, Dale W. Carder wrote:
> One caveat I ran into is that on the supervisor 720, netflow
> entries are mistakenly created for flows that are dropped by
> uRPF.

This is a good thing, as long as the destination interface reported is
"null0".  It means you can *see* what the box dropped, instead of having
to guess what this hacked customer machine is trying to do...

> At some point, as much as everyone would love to use netflow for
> billing and everything else, on a busy aggregate link it is like
> trying to drink out of a fire hydrant.  Sampling is there for a
> reason, but may or may not be for you.

Yes, this is well-understood.

gert
-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             gert at greenie.muc.de
fax: +49-89-35655025                        gert at net.informatik.tu-muenchen.de