[154845] in North American Network Operators' Group
Re: Real world sflow vs netflow?
daemon@ATHENA.MIT.EDU (Mikael Abrahamsson)
Sat Jul 14 05:16:12 2012
Date: Sat, 14 Jul 2012 11:15:30 +0200 (CEST)
From: Mikael Abrahamsson <swmike@swm.pp.se>
To: =?ISO-8859-2?Q?=A3ukasz_Bromirski?= <lukasz@bromirski.net>
In-Reply-To: <50012E21.4060802@bromirski.net>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
This message is in MIME format. The first part should be readable text,
while the remaining parts are likely unreadable without MIME-aware tools.
---137064504-202493182-1342257330=:27169
Content-Type: TEXT/PLAIN; charset=ISO-8859-2; format=flowed
Content-Transfer-Encoding: 8BIT
On Sat, 14 Jul 2012, Łukasz Bromirski wrote:
> NetFlow, jFlow, IPFIX deal with flows. You can discuss sampling accuracy
> and things like that, but working with flows is more accurate.
If you do 1:1000 sampling with both Netflow and sFlow, why would one of
them be more accurate than the other? If you analyze the flow on the
device or on the collector (as might be done with sFlow), I don't see why
one would be btter than the other.
--
Mikael Abrahamsson email: swmike@swm.pp.se
---137064504-202493182-1342257330=:27169--
