* [email protected] (Adam E Barratt (Network Operations)) [Tue 22 Jun 2010,
00:36 CEST]:
I was wondering if there is anything like the Cisco command SH IP
CACHE FLOW on foundry? I know there is SFLOW, but using a collector
is not great when you're in the middle of an attack.
Sadly, no. sFlow is sample-based and MLX doesn't attempt to correlate
different packets into flows or streams.
Having a collector already running is probably the best answer in this
case... like pmacct, NFsen, ntop.
-- Niels.
--
_______________________________________________
foundry-nsp mailing list
[email protected]
http://puck.nether.net/mailman/listinfo/foundry-nsp
