On Thu Oct 26, 2006 at 10:11:55 +0100, Paolo Lucente wrote: >Hi Oliver, >as you know, sFlow relies on packet sampling. I'd say: >* this is why it's correct reasoning in terms of packets rather than bytes. > On http://www.sflow.org/ you can find some useful documents. >* whether 6 packets out of a certain total is correct amount, it depends on > the sampling rate you have configured on your switch. >* the fact that a little stream has been totally "ignored" while a big one > has got some packets sampled makes a lot of sense to me. >* if you want to renormalize counters, you need to write down a config file > and set 'sfacctd_renormalize' to true.
Ok, so have I completely misunderstood the purpose of sFlow? Currently we are using pmacctd to record every single byte and packet that crosses our network via mirror ports on the switches. Does sFlow only generate a "summary" of the traffic? For our purposes it will need to report every byte and packet, just as our pmacctd setup currently does. Maybe I am just not understanding the purpose of sFlow... -- Regards, Oliver Hookins _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
