[c-nsp] Netflow/Sflow for "irrelevant" traffic?

Chris Welti chris.welti at switch.ch
Fri Jul 31 05:14:17 EDT 2020


Exactly. For example, we do all our netflow 1:1 off a fiber tap on external appliances,
so we see all the traffic on the wire even those packets that are not forwarded or dropped locally.
That sometimes is a bit confusing as well :)

--
Chris


On 30.07.20 18:18, Saku Ytti wrote:
> On Thu, 30 Jul 2020 at 19:12, <hank at interall.co.il> wrote:
>
> Hey,
>
>> If I'm not mistaken, sflow/netflow does not pick up null0 routed
>> flows.  Plz correct me if I am wrong.
> I don't think there is a single answer to this question. It depends on
> a platform, where netflow/sflow is done and in what order are
> functions executed. There will be a lot of complex corner cases
> particularly with QoS, PBR and so forth.
>
>



More information about the cisco-nsp mailing list