[c-nsp] Netflow/Sflow for "irrelevant" traffic?

Radu-Adrian FEURDEAN cisco-nsp at radu-adrian.feurdean.net
Fri Jul 31 14:28:02 EDT 2020


On Thu, Jul 30, 2020, at 18:18, Saku Ytti wrote:
> 
> I don't think there is a single answer to this question. It depends on
> a platform, where netflow/sflow is done and in what order are
> functions executed. There will be a lot of complex corner cases
> particularly with QoS, PBR and so forth.

For sFlow, most (??? all ???) platforms sample *inbound* traffic only. That means null-routed traffic will be sampled even before the decision of null-routing occurs.

NetFlow, that's another story.

-- 
R.-A. Feurdean


More information about the cisco-nsp mailing list