[c-nsp] Netflow/Sflow for "irrelevant" traffic?
Saku Ytti
saku at ytti.fi
Thu Jul 30 08:35:45 EDT 2020
On Thu, 30 Jul 2020 at 15:26, Drew Weaver <drew.weaver at thenap.com> wrote:
> So just for a refresher if you are sampling lets say at 1:500 and lets say 1 byte goes through an interface that is not intended to produce an export?
> The exporting only happens if the amount of data is over a certain threshold? Does that threshold vary?
You'd pick up every nTh packet for sampling.
sample(packet) if packet_count % 500 == 0
--
++ytti
More information about the cisco-nsp
mailing list