On May 20, 2009, at 4:37 AM, [email protected] wrote:
Cisco 6500/7600 as far as I know always does non-sampled netflow in hardware - then the netflow may or may not be sampled before export, depending on your configuration.
Unfortunately, the caveats associated with NetFlow on past and current 6500/7600 hardware generally tend to render it unsuitable due to the high likelihood of mls table overflow in most circumstances, along with the lack of TCP flags and insight into dropped traffic.
----------------------------------------------------------------------- Roland Dobbins <[email protected]> // <http://www.arbornetworks.com> Unfortunately, inefficiency scales really well. -- Kevin Lawton _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
