>> show if 100K packets arrived in 1 second or 100 seconds. > > Actually, it will - most any NetFlow collection/analysis system (open-source > or commercial) derives this information based upon the received flow > timestamps and the reported number of flows/NDE packet.
and if they constitute a single "flow"? don't get the wrong idea. netflow is a great tool to have in the kit bag for diagnosing issues. but in this case its not necessarily the 'best' tool to pinpoint precisely what might be going on. case in point: lets say its a device flooding control plane with BPDUs. will netflow show that? cheers, lincoln. _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
