[c-nsp] 6k Netflow To Be or Not To Be...

Dobbins, Roland rdobbins at arbor.net
Mon Nov 14 22:25:18 EST 2011


On Nov 15, 2011, at 5:57 AM, Nick Hilliard wrote:

> pfc3 netflow is fine if you need to measure traffic ratios or protocol spread. 

Actually, in any kind of diverse source/dest/layer-4 environment, it isn't, due to non-deterministic statistical skewing due to mls table overflow.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

		The basis of optimism is sheer terror.

			  -- Oscar Wilde




More information about the cisco-nsp mailing list