On Jan 25, 2011, at 7:33 AM, Lincoln Dale wrote: > sure - might be - but netflow won't - for example - show if 100K packets > arrived in 1 second or 100 seconds.
Actually, it will - most any NetFlow collection/analysis system (open-source or commercial) derives this information based upon the received flow timestamps and the reported number of flows/NDE packet. ------------------------------------------------------------------------ Roland Dobbins <[email protected]> // <http://www.arbornetworks.com> Most software today is very much like an Egyptian pyramid, with millions of bricks piled on top of each other, with no structural integrity, but just done by brute force and thousands of slaves. -- Alan Kay _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
