Re: Problems migrating from netflow to sFlow: results are low

From: Jay A. Kreibich <jak@uiuc.edu>
Date: 08/10/05
Message-ID: <20050810173527.GB12852@uiuc.edu>

On Wed, Aug 10, 2005 at 04:41:32PM +0200, Christian Hammers scratched on the wall:

> The test data below compares the volumina of some ADSL customers who
> could easily be identified by their network adresses (netflow) and
> are all behind one switchport which is exported via sflow. Their
> incoming data is exported via netflow *not* by this switch but by the
> router before it.

  Is this router also a Foundry? We've had a lot of trouble getting
  clean Netflow data off our Foundries. We finally gave up and went
  with a software probe system and our data got MUCH cleaner. Flows
  actually balanced and made sense.

  In other words, if you're doing your netflow exports off of a
  Foundry, I wouldn't trust your base-line data very much.

   -j

-- 
                     Jay A. Kreibich | CommTech, Emrg Net Tech Svcs
                        jak@uiuc.edu | Campus IT & Edu Svcs
          <http://www.uiuc.edu/~jak> | University of Illinois at U/C
Received on Wed Aug 10 10:42:26 2005

This archive was generated by hypermail 2.1.8 : 08/10/05 PDT