On Jan 25, 2011, at 8:45 AM, Lincoln Dale wrote: > and if they constitute a single "flow"?
Each NDE record lists the number of packets in a given flow, so, yes, absolutely. Operators make use of this NetFlow capability all the time. > don't get the wrong idea. netflow is a great tool to have in the kit bag for > diagnosing issues. but in this case its not necessarily the 'best' tool to > pinpoint precisely what might be going on. It does in fact work quite well for this application - very useful for gaining the necessary information to construct a great deal of one's CoPP policies, for example. > case in point: lets say its a device flooding control plane with BPDUs. will > netflow show that? If a given platform team choose to implement FNF on their hardware to include include layer-2 information, sure, there's no reason why it couldn't, although presently nobody's done this, to my knowledge. ;> ------------------------------------------------------------------------ Roland Dobbins <[email protected]> // <http://www.arbornetworks.com> Most software today is very much like an Egyptian pyramid, with millions of bricks piled on top of each other, with no structural integrity, but just done by brute force and thousands of slaves. -- Alan Kay _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
