[c-nsp] netflow

Phil Mayers p.mayers at imperial.ac.uk
Mon Nov 26 07:25:26 EST 2007


Ivan Gasparik wrote:
> you can decrease the SP load by adding a DFC's to your line cards. DFC 
> will do gathering statistics from forwarding hardware and populating 
> netflow entries in netflow cache. all this is load caused by 
> interrupts as you can see it now in SP CPU utilization.
> SP will then do only the export work - generating and sending packets 
> to your netflow collector, this part of CPU load is seen as NDE 
> process on SP.

It's worth bearing in mind that some netflow options require pre-export 
lookups in software; namely egress interface, BGP AS, BGP next hop - all 
of which require punting to the *RP*.

In addition, I believe the 6708-10G will export the netflow using the 
DFC CPU, not even loading the SP CPU.



More information about the cisco-nsp mailing list