[c-nsp] Sampled netflow & compliance issues
Paolo Lucente
pl+list at pmacct.net
Thu Feb 9 05:39:34 EST 2012
Hi,
On Thu, Feb 09, 2012 at 10:17:54AM +0000, Phil Mayers wrote:
> On 02/09/2012 10:00 AM, Gert Doering wrote:
>
>> Billing using sampled netflow is more where I see problems arising,
>> because you know your numbers will not be accurate, but you don't know
>> how big the error is, and in which direction you err. With unsampled
>
> Is that true? As indicated, my stats are rusty, but I would have thought
> it possible to calculate an error bar.
Fully share Gert's point. On the topic there is an interesting position
paper (*) from the InMon guys. It revolves around sFlow but, as long as
random packet sampling is employed for selection, it holds for sampled
NetFlow aswell.
Cheers,
Paolo
(*) http://www.inmon.com/pdf/sFlowBilling.pdf
More information about the cisco-nsp
mailing list