sFlow vs netFlow/IPFIX

Roland Dobbins rdobbins at arbor.net
Mon Feb 29 07:53:19 UTC 2016

On 29 Feb 2016, at 14:41, Pavel Odintsov wrote:

> Could you describe they in details?

Inconsistent stats, lack of ifindex information.

> But netflow __could__ delay telemetry up to 30 seconds (in case of 
> huge syn/syn-ack flood for example) and you network will experience 
> downtime.

This is incorrect, and reflects an inaccurate understanding of how 
NetFlow/IPFIX actually works, in practice.  It's often repeated by those 
with little or no operational experience with NetFlow/IPFIX.

Roland Dobbins <rdobbins at arbor.net>

More information about the NANOG mailing list