[c-nsp] Netflow/Sflow for "irrelevant" traffic?

Saku Ytti saku at ytti.fi
Thu Jul 30 08:35:45 EDT 2020


On Thu, 30 Jul 2020 at 15:26, Drew Weaver <drew.weaver at thenap.com> wrote:

> So just for a refresher if you are sampling lets say at 1:500 and lets say 1 byte goes through an interface that is not intended to produce an export?
> The exporting only happens if the amount of data is over a certain threshold? Does that threshold vary?

You'd pick up every nTh packet for sampling.

sample(packet) if packet_count % 500 == 0

-- 
  ++ytti


More information about the cisco-nsp mailing list