[c-nsp] 6k Netflow To Be or Not To Be...

[Dobbins, Roland]

On Nov 15, 2011, at 12:15 AM, Mark Mason wrote:

> Why turn on netflow in a 6k w/ SUP720-10G if netflow in 6k (minus the SUP2T) is notoriously not good? 

It's pretty well-known in the operational community that NetFlow from Sup720 and prior Sups has a lot of caveats due to small mls table size, lack of packet-sampled control of flow creation (i.e., real sampled NetFlow), no TCP flags, and no stats on dropped traffic.

Sup2T and the DFC4-enabled linecards make use of the same EARL8 ASIC used in the Nexus 7000, which generates operationally-useful NetFlow.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

		The basis of optimism is sheer terror.

			  -- Oscar Wilde