[183442] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: NetFlow - path from Routers to Collector

daemon@ATHENA.MIT.EDU (Roland Dobbins)
Wed Sep 2 05:42:31 2015

X-Original-To: nanog@nanog.org
From: "Roland Dobbins" <rdobbins@arbor.net>
To: nanog@nanog.org
Date: Wed, 02 Sep 2015 16:40:37 +0700
In-Reply-To: <20150902055057.416E3550C6B46@freedman.net>
Errors-To: nanog-bounces@nanog.org

On 2 Sep 2015, at 12:50, Avi Freedman wrote:

> + optimal tweaks include local flow proxy that can also rate
> limit / re-sample, and send topk talkers over 'true' OOB.

Yes, a lot of distributed flow collection/analysis architectures are 
deployed this way, doing more than top-talkers, even.  The key is that 
traffic between the elements of those types of deployments *must* not be 
disrupted; true OOB is preferred, but VLAN/VRF is still the norm, there.

-----------------------------------
Roland Dobbins <rdobbins@arbor.net>

home help back first fref pref prev next nref lref last post