Cisco is sending the in and out packets in
their sFlow implementation on their Nexus switches. Obviously,
this double counts the information.
Are there solutions that process those flows and remove one
of those directions?
Wouldn't you just do that in your reporting? The report engine
usually has options for interface, ingress/egress, prefix range,
protocol, ....
Then when you need to aggregate for a specific interface for
additional troubleshooting, you have all the information for when
you need it.
Yes, your aggregate numbers for total packets transiting is double,
but I generally have specific reports for specific traffic patterns
I focus on anyway.
