[c-nsp] Netflow/Sflow for "irrelevant" traffic?
Radu-Adrian FEURDEAN
cisco-nsp at radu-adrian.feurdean.net
Fri Jul 31 14:28:02 EDT 2020
On Thu, Jul 30, 2020, at 18:18, Saku Ytti wrote:
>
> I don't think there is a single answer to this question. It depends on
> a platform, where netflow/sflow is done and in what order are
> functions executed. There will be a lot of complex corner cases
> particularly with QoS, PBR and so forth.
For sFlow, most (??? all ???) platforms sample *inbound* traffic only. That means null-routed traffic will be sampled even before the decision of null-routing occurs.
NetFlow, that's another story.
--
R.-A. Feurdean
More information about the cisco-nsp
mailing list