On 25/01/2011, at 9:44 AM, Roland Dobbins wrote: > > On Jan 25, 2011, at 5:37 AM, Lincoln Dale wrote: > >> key is probably to find out what traffic is hitting it. > > NetFlow may be useful to help determine this, as well.
sure - might be - but netflow won't - for example - show if 100K packets arrived in 1 second or 100 seconds. for the purposes of attempting to figure out what is causing software CPU spikes, there's a big difference between 100K pps and 1K pps. ethanalyzer (wireshark) in inband is pretty damn good for this kind of thing. cheers, lincoln. _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
