[c-nsp] Netflow vs SNMP

Dobbins, Roland Roland.Dobbins at netscout.com
Mon Oct 2 03:10:30 EDT 2023



On 2 Oct 2023, at 13:13, Hank Nussbacher via cisco-nsp <cisco-nsp at puck.nether.net<mailto:cisco-nsp at puck.nether.net>> wrote:

Does this make sense to go 1:1 which will only increase the number of Netflow record to export?  Everyone that does 1:1000 or 1:10000 sampling, do you also seen a discrepancy between Netflow stats vs SNMP stats?

No and no.

Ensure that the active flow timer is set to 60s, that the inactive flow timer is set to 5s, and that the NetFlow capture/analysis system is configured with those values.

For SNMP, ensure that the counter tabulation values are set to 60s/1m, and that the SNMP polling/analysis system is configured with those values.


More information about the cisco-nsp mailing list