[c-nsp] Netflow Version 9

[Dobbins, Roland]

On Jan 13, 2011, at 9:30 PM, Righa Shake wrote:

> What are the pros and cons as compared to version 5.

v5 is a fixed format which is no longer being developed - all NetFlow implementation moving forward are based upon v9.

v9 gives you egress NetFlow, support for MPLS, and is an extensible telemetry format which enables features like Flexible NetFlow, which provides finer-grained information about network traffic.

> what is version 9 impact on router and traffic

 
Nil - single-digit CPU, 0.5% - 1.5% of overall traffic volume, multiplied by sampling factor (i.e, for 1:100, you'd multiply by 0.01).

You don't really have a choice; you must implement v9, as v5 is obsolete and is no longer being developed.  But it's all upside, with no drawbacks.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

 	     Sell your computer and buy a guitar.