On 3/20/23 08:55, Mike Hammett wrote:
Cisco is sending the in and out packets in their sFlow implementation on their Nexus switches. Obviously, this double counts the information.
Are there solutions that process those flows and remove one of those directions?
Wouldn't you just do that in your reporting? The report engine usually has options for interface, ingress/egress, prefix range, protocol, .... Then when you need to aggregate for a specific interface for additional troubleshooting, you have all the information for when you need it. Yes, your aggregate numbers for total packets transiting is double, but I generally have specific reports for specific traffic patterns I focus on anyway. Raymond Burkholder One Unified Net Limited
----- Mike Hammett Intelligent Computing Solutions <http://www.ics-il.com/> <https://www.facebook.com/ICSIL><https://plus.google.com/+IntelligentComputingSolutionsDeKalb><https://www.linkedin.com/company/intelligent-computing-solutions><https://twitter.com/ICSIL> Midwest Internet Exchange <http://www.midwest-ix.com/> <https://www.facebook.com/mdwestix><https://www.linkedin.com/company/midwest-internet-exchange><https://twitter.com/mdwestix> The Brothers WISP <http://www.thebrotherswisp.com/> <https://www.facebook.com/thebrotherswisp><https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg>