On 3/20/23 08:55, Mike Hammett wrote:
Cisco is sending the in and out packets in their sFlow implementation
on their Nexus switches. Obviously, this double counts the information.
Are there solutions that process those flows and remove one of those
directions?
Wouldn't you just do that in your reporting? The report engine usually
has options for interface, ingress/egress, prefix range, protocol, ....
Then when you need to aggregate for a specific interface for additional
troubleshooting, you have all the information for when you need it.
Yes, your aggregate numbers for total packets transiting is double, but
I generally have specific reports for specific traffic patterns I focus
on anyway.
Raymond Burkholder
One Unified Net Limited
-----
Mike Hammett
Intelligent Computing Solutions <http://www.ics-il.com/>
<https://www.facebook.com/ICSIL><https://plus.google.com/+IntelligentComputingSolutionsDeKalb><https://www.linkedin.com/company/intelligent-computing-solutions><https://twitter.com/ICSIL>
Midwest Internet Exchange <http://www.midwest-ix.com/>
<https://www.facebook.com/mdwestix><https://www.linkedin.com/company/midwest-internet-exchange><https://twitter.com/mdwestix>
The Brothers WISP <http://www.thebrotherswisp.com/>
<https://www.facebook.com/thebrotherswisp><https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg>
