Re: Multi-collector Netflow/etc

["Bradley Dunn" <bradley () dunn org>]

> Apparently there are a number of packet reflectors (usually
> running on a Unix machine) that work in theory, how do these
> work in actual practice, what kind of performance and
> reliability to they have, and which work well for traffic
> collection?

I have had good results with samplicator:
http://www.switch.ch/tf-tant/floma/sw/samplicator/

I haven't had any problems with it handling fairly heavy loads and the CPU
impact is minimal. Under very heavy loads you might want to bump up the
receive buffer (the -b command-line option).

Bradley