On 17/07/2012 16:32, Simon Leinen wrote: > That's one reason, but another reason would be that at least in Netflow > (but sFlow may be similar depending on how you use it), the reported > byte counts only include the sizes of the "L3" packets, i.e. starting at > the IP header, while the SNMP interface counters (ifInOctets etc.) > include L2 overhead such as Ethernet frame headers and such.
sflow includes both figures. Nick