Exactly. For example, we do all our netflow 1:1 off a fiber tap on external
appliances,
so we see all the traffic on the wire even those packets that are not forwarded
or dropped locally.
That sometimes is a bit confusing as well :)
--
Chris
On 30.07.20 18:18, Saku Ytti wrote:
On Thu, 30 Jul 2020 at 19:12, <[email protected]> wrote:
Hey,
If I'm not mistaken, sflow/netflow does not pick up null0 routed
flows. Plz correct me if I am wrong.
I don't think there is a single answer to this question. It depends on
a platform, where netflow/sflow is done and in what order are
functions executed. There will be a lot of complex corner cases
particularly with QoS, PBR and so forth.
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
