random versus deterministic netflow sampling
Hello All: I wanted to ask what version of Netflow sampling the bulk of NZ networks employ today. If Netflow is not used is it due to its overhead on equipment and or its complexity to administer? Thanks Rich Groves WAND Research Group
Hey there, Netflow version 5 is typically used on most networks since it is very common on different vendors and the tools have existed for some time. Version 8 would produce less overhead on networks, with it's built in aggregation. Since sampling does not yield completely accurate results anyway, it makes sense to use netflow records to gain an understanding of your network's traffic types and percentages of each. Visualizing the information is a little more involved than just plotting in/out octets on an interface; but it's pretty straight forward... Truman On 8/06/2005, at 12:47 PM, Rich Groves wrote:
Hello All: I wanted to ask what version of Netflow sampling the bulk of NZ networks employ today. If Netflow is not used is it due to its overhead on equipment and or its complexity to administer?
Thanks
Rich Groves WAND Research Group
_______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog
participants (2)
-
Rich Groves
-
Truman Boyes