[c-nsp] Netflow - GSR engine 5

Dobbins, Roland rdobbins at arbor.net
Thu Feb 25 19:28:07 EST 2010

On Feb 26, 2010, at 12:43 AM, Drew Weaver wrote:

>  but why is it showing up in the netflow exports?

Because that's how NetFlow is supposed to work on a real router, vs. the broken implementation on 6500/7600 with current hardware.


It's of great operational significance to know that even though you're dropping traffic on your side of a link via uRPF, S/RTBH, ACLs, whatever, said traffic is still pummeling your router.  You can then work with your peer/upstream/downstream/customer to get the traffic squelched closer to the actual source(s).

Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

    Injustice is relatively easy to bear; what stings is justice.

                        -- H.L. Mencken

More information about the cisco-nsp mailing list