Wednesday, July 4, 2018

Sflow probing of discarded packets

I'd like to monitor packets that are being discarded on a switch, but according to sflow specification it won't probe them:

 Packet Flow Sampling is accomplished as follows: When a packet arrives on an interface, the Network Device makes a filtering decision to determines whether the packet should be dropped. If the packet is not filtered a destination interface is assigned by the switching/routing function. At this point a decision is made on whether or not to sample the packet. 

My question is there some option that would allow to bypass this behavior? I was thinking perhaps routing to another interface (i.e. Null0) would be a workaround? If so, would that create extra load on switch?



No comments:

Post a Comment