Hello,
As a datagram passes through the intricacies of a L3 switched architecture, at what point does a Netflow entry get created and placed in the NDE cache and Netflow table? I assume a packet that is dropped by an ACL applied inbound on a L3 interface will not create a flow but one that is dropped by an ACL applied outbound will create a flow since the switch had to make a routing decision, whether it was process switched, fast switched, or CEF/dCEF switched, to the outbound interface. Any information regarding the path a packet takes through a L3 switch and the point at which a Netflow entry is created will be very beneficial.
Thanks
-m2