We are seeing some wierd stuff with our Netflow feeds from RB’s into a new accounting package. One of the key settings is “sample rate” and just wondering as I can’t see where to set it the default sample rate on a RB Traffic Flow feed is?
At the moment we are seeing numbers that are just not possible based on the performance of the interfaces.
Is much lighter for the CPU and memory than IPFIX.
Is much faster for the collector and analyzer receive and detect the first packages of somo anomaly in the network.