[c-nsp] nfSen / nfDump
Nick Hilliard
nick at foobar.org
Mon Aug 28 17:12:45 EDT 2017
Nick Cutting wrote:
> Doesn't look like sflow daemon supports the -s sampling tag.
>
> %sources = (
> 'myRouter' => { 'port' => '9901', 'col' => '#00ff00', 'type' => 'netflow', 'optarg' => ' -s -1000 '},
> );
yes, that's correct. The sflow sampling rate is specified in each sflow
packet, so there is no need to specify it on the collector - it's
automatically detected on a per-packet basis.
This is a working config on a small site (albeit a different sflow agent
platform, but that won't make any difference):
> %sources = (
> 'rtr01' => { 'port' => '2055', 'col' => '#0000ff', 'type' => 'sflow' },
> 'rtr02' => { 'port' => '2056', 'col' => '#00ff00', 'type' => 'sflow' },
> );
nfsen will then start up sfcapd instead of nfcapd.
Nick
More information about the cisco-nsp
mailing list