[c-nsp] nfSen / nfDump

Nick Hilliard nick at foobar.org
Mon Aug 28 17:12:45 EDT 2017


Nick Cutting wrote:
> Doesn't look like sflow daemon supports the -s sampling tag.
> 
> %sources = (
>     'myRouter'  => { 'port' => '9901', 'col' => '#00ff00', 'type' => 'netflow', 'optarg' => ' -s -1000 '},
> );

yes, that's correct.  The sflow sampling rate is specified in each sflow
packet, so there is no need to specify it on the collector - it's
automatically detected on a per-packet basis.

This is a working config on a small site (albeit a different sflow agent
platform, but that won't make any difference):

> %sources = (
>         'rtr01' => { 'port' => '2055', 'col' => '#0000ff', 'type' => 'sflow' },
>         'rtr02' => { 'port' => '2056', 'col' => '#00ff00', 'type' => 'sflow' },
> );

nfsen will then start up sfcapd instead of nfcapd.

Nick


More information about the cisco-nsp mailing list