hi folks .
i have cisco ASR 1002 i created a net flow config to match all the ip traffic as below : ============= flow exporter me_nfa_analyzer destination 66.12.64.29 transport udp 9996
============= flow record ALL match transport tcp destination-port match transport tcp source-port match transport udp destination-port match transport udp source-port match ipv4 destination address match ipv4 source address collect counter bytes collect counter packets
====================== flow monitor ALL record ALL exporter me_nfa_analyzer cache timeout active 60
int port channel 2 ip flow monitor ALL input
============
from settings above i guess I'm matching all TCP & UDP . but in reality i see thee is about 300Mbps difference when i see the result from net flow & SNMP.
snmp is more accurate and has value more than 200-300 from the value i see from the net flow .
is there something i need to check ?
is my rules above match all the ip traffic ?
why there is difference between snmp & net flow ... I'm supposed to see them as identical .!!!!
cheers
... View more