On Thu, Jul 30, 2020, at 18:18, Saku Ytti wrote: > > I don't think there is a single answer to this question. It depends on > a platform, where netflow/sflow is done and in what order are > functions executed. There will be a lot of complex corner cases > particularly with QoS, PBR and so forth.
For sFlow, most (??? all ???) platforms sample *inbound* traffic only. That means null-routed traffic will be sampled even before the decision of null-routing occurs. NetFlow, that's another story. -- R.-A. Feurdean _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
