Ah, I did not know sflow could do such things.  I wonder if it hooks into the 
MIBs similar to RMON. Interesting.  Yeah, even with extended snmp gets its not 
all that effecient.

----- Original Message -----
From: Rick Jones [mailto:[email protected]]
Sent: Monday, April 11, 2011 04:11 PM
To: Gary Gatten
Cc: '[email protected]' <[email protected]>
Subject: Re: [Ntop] known double free bug in 4.0.3?

On Mon, 2011-04-11 at 15:50 -0500, Gary Gatten wrote:
> I may have to read through this thread again, I'm confused.  To my
>  knowledge snmp and/or rmon is the only way to get interface
>  "counters".  Netflow, sflow, etc give you flow/conversation details.

It may help to think of sFlow as "Shimmer" - it is both a floor wax
*and* a dessert topping.  An sflow agent can be configured to send flow
samples (similar to netflow) or counter samples to an sflow collector,
and it does appear that ntop can receive and do something useful with
sflow counter samples.

The Very Nice Thing about an sFlow counter sample is one gets all the
counters in one shot - so instead of having to query each stat for an
interface one at a time via SNMP, they all "just arrive" together in the
same sFlow PDU.  In fact, multiple counter samples, each from multiple
interfaces, can be carried in the same sflow PDU making it even that
much more efficient than querying via SNMP.

rick







<font size="1">
<div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 
1.0pt 0in'>
</div>
"This email is intended to be reviewed by only the intended recipient
 and may contain information that is privileged and/or confidential.
 If you are not the intended recipient, you are hereby notified that
 any review, use, dissemination, disclosure or copying of this email
 and its attachments, if any, is strictly prohibited.  If you have
 received this email in error, please immediately notify the sender by
 return email and delete this email from your system."
</font>

_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to