Real world sflow vs netflow?

Tue Jul 17 16:37:44 UTC 2012

On 17/07/2012 16:32, Simon Leinen wrote:
> That's one reason, but another reason would be that at least in Netflow
> (but sFlow may be similar depending on how you use it), the reported
> byte counts only include the sizes of the "L3" packets, i.e. starting at
> the IP header, while the SNMP interface counters (ifInOctets etc.)
> include L2 overhead such as Ethernet frame headers and such.

sflow includes both figures.

Nick