Hello,

I Wonder why there is a big difference between a graphical report from SNMP and Netflow as follow attached.

Release that SNMP GVT reports almost 20Mbps at 08:50 which NF GVT reports 11 Mbps at the same moment.

Why there is that discrepancy ?

Article Comments

There could be many reasons for this. The first few that come to mind are that SNMP reports the Netflow traffic and that there could be filters on the Netflow sensor or the Netflow could be set up to only export flows from certain interfaces rather than all the interfaces. Without much more information and or screenshots though it's difficult to say.


Oct, 2013 - Permalink

First thing I would check in your NetFlow configuration is the sampling rate.

By default NetFlow creates records for all packets but I haven't seen many people that don't apply some kind of sampling rate to lower CPU utilization on the router.


Oct, 2013 - Permalink