nanog mailing list archives

Re: sFlow vs netFlow/IPFIX


From: "Roland Dobbins" <rdobbins () arbor net>
Date: Mon, 29 Feb 2016 14:53:19 +0700

On 29 Feb 2016, at 14:41, Pavel Odintsov wrote:

Could you describe they in details?

Inconsistent stats, lack of ifindex information.

But netflow __could__ delay telemetry up to 30 seconds (in case of huge syn/syn-ack flood for example) and you network will experience downtime.

This is incorrect, and reflects an inaccurate understanding of how NetFlow/IPFIX actually works, in practice. It's often repeated by those with little or no operational experience with NetFlow/IPFIX.

-----------------------------------
Roland Dobbins <rdobbins () arbor net>


Current thread: