What are the real world impacts (FIB, TCAM, CPU) of enabling 1/2048 sampled netflow on a 6500 (3bxl w/DFC and 1G RAM on all line cards) carrying several full BGP tables and 10 gigs of max traffic? It would only be used for detecting inbound UDP floods and other high PPS anomalies so there is no need for full flows or even much details, just ip src/dst. Is it possible without CPU and BGP sessions flapping in the wind?

--
Randy M

_______________________________________________
cisco-nsp mailing list  [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Reply via email to