[187927] in North American Network Operators' Group
Re: sFlow vs netFlow/IPFIX
daemon@ATHENA.MIT.EDU (Roland Dobbins)
Mon Feb 29 02:53:34 2016
X-Original-To: nanog@nanog.org
From: "Roland Dobbins" <rdobbins@arbor.net>
To: "nanog@nanog.org" <nanog@nanog.org>
Date: Mon, 29 Feb 2016 14:53:19 +0700
In-Reply-To: <CALgsdbeLo-pmoU6h9tCckyKdjMiVS=fdwuD=GMgLe8-84088QQ@mail.gmail.com>
Errors-To: nanog-bounces@nanog.org
On 29 Feb 2016, at 14:41, Pavel Odintsov wrote:
> Could you describe they in details?
Inconsistent stats, lack of ifindex information.
> But netflow __could__ delay telemetry up to 30 seconds (in case of
> huge syn/syn-ack flood for example) and you network will experience
> downtime.
This is incorrect, and reflects an inaccurate understanding of how
NetFlow/IPFIX actually works, in practice. It's often repeated by those
with little or no operational experience with NetFlow/IPFIX.
-----------------------------------
Roland Dobbins <rdobbins@arbor.net>
