[f-nsp] Anything close to SH IP CACHE FLOW on an MLX?

[Niels Bakker]

* abarratt at socket.net (Adam E Barratt (Network Operations)) [Tue 22 Jun 2010, 00:36 CEST]:
>I was wondering if there is anything like the Cisco command SH IP 
>CACHE FLOW on foundry?  I know there is SFLOW, but using a collector 
>is not great when you're in the middle of an attack.

Sadly, no.  sFlow is sample-based and MLX doesn't attempt to correlate 
different packets into flows or streams.

Having a collector already running is probably the best answer in this 
case... like pmacct, NFsen, ntop.


	-- Niels.

--