Hello. We have about 60 offices spread across Canada, which all connect back to our head office via an MPLS network. For the most part, everything works great, not many complaints from users. Our offices range from T1 speed to 10Mb. Every now and then we hear complaints that things are slow out in an office, but without Netflow info available at that instant, all we can tell the user is that the line is being heavily utilized. By the time we call the provider and have them turn on Netflow, the traffic spike has subsided.
So, this brings me to my question; would it make sense to have the provider turn on Netflow on every router, and send all of the info back to a Netflow server at head office? I was wondering what type of overhead this would put on the connections coming into head office?
Thanks in advance.