03-02-2012 02:12 PM
We operate several XMR's where we do core routing. For monitoring, we started using sflow and the as-stats script set which you can find at https://neon1.net/as-stats/
After configuring we see only incoming traffic being monitored and after observing the sflow packets in wireshark it seems that sflow only operates on ingreds traffic. Traffic src'ed from our own is not monitored at all.
What to do about this and is this by design?
03-04-2012 11:31 AM
sFlow will collect ingress-egress information however the stats are for byte and packet counter - see below
Sample data is collected from inbound traffic on ports enabled for sFlow. However, both traffic directions are counted for byte and packet counter statistics sent to the collector. The actual IP source address of the IP header is decided from the router port address of the best route to the
sFlow collector IP address.