[c-nsp] more net flow, which interfaces to monitor and in which direction?

Roland Dobbins rdobbins at arbor.net
Wed May 21 21:58:27 EDT 2014


On May 22, 2014, at 8:40 AM, CiscoNSP List <cisconsp_list at hotmail.com> wrote:

> Can anyone please explain why?

Another problem with egress NetFlow is that you won't get stats on traffic which is being dropped by ACLs, uRPF, et. al.

You should always use ingress NetFlow unless you have a specific topological issue which precludes its use.

----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

                   Equo ne credite, Teucri.

    		   	  -- Laocoön




More information about the cisco-nsp mailing list