[c-nsp] WARNING: Netflow Data Export & Hardware assisted NAT not supported on 76xx/65xx on the same interface

Stig Meireles Johansen stig.johansen at datametrix.no
Mon Aug 29 13:15:40 EDT 2011


>On 26/08/2011, at 6:25 PM, Matthew Huff wrote:
>> I'm looking at using SPAN to replicate the data and send it to a linux box to then create netflow data exports, however, given the nature of the data (high bandwidth and microburst), I'm not sure that the Linux box will work accurately. I assumed the PFC would be doing the exports in hardware giving us the most accurate realtime look at the market data. Evidently I was wrong.

And Andrew followed up with :
>Why does everyone want to use SPAN ports to do this sort of thing? Buy a TAP(ethernet), thats what they are there for!
>SPAN ports are great for a quick debugging session, but you are (iirc) limited to 2 of them. You will be stuck if you ever need this functionality in future and you are using the SPAN for >production purposes.

Agree partly with you, but in some cases it's not practical to use tap's. Use VACL Capture instead... and let the SPAN's be used for troubleshooting and service modules.

/Stig, The





More information about the cisco-nsp mailing list