[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

sFlow vs netFlow/IPFIX

On 29 Feb 2016, at 14:41, Pavel Odintsov wrote:

> Could you describe they in details?

Inconsistent stats, lack of ifindex information.

> But netflow __could__ delay telemetry up to 30 seconds (in case of 
> huge syn/syn-ack flood for example) and you network will experience 
> downtime.

This is incorrect, and reflects an inaccurate understanding of how 
NetFlow/IPFIX actually works, in practice.  It's often repeated by those 
with little or no operational experience with NetFlow/IPFIX.

Roland Dobbins <rdobbins at arbor.net>