Valid From: August 1st, 2018
Updated on: March 1, 2019
SFlowis a packet sampling technology where the switch captures every 100th packet (configurable) per interface and sends it off to the collector. Sflow is built into the ASIC, and places minimal load on the CPU.It is a general purpose network traffic measurement system technology. sFlow is designed to be embedded in any network device and to provide continuous statistics on any protocol (L2, L3, L4, and up to L7), so that all traffic throughout a network can be accurately characterized and monitored. These statistics are essential for congestion control, troubleshooting, security surveillance, network planning etc. They can also be used for IP accounting purposes.Some of the switches like Brocade, Extreme and HP support SFlows. The Seceon CCE provides a Flow collector function to collect these flows and convert them to flow information that can be used by the APE. Seceon CCE receives SFlows on port 6343.
Certain vendors switch from vendors such as Brocade, Extreme and HP support sFlows. The Seceon CCE provides ansFlow collector function to collect these flows and convert them to flow information that can be used by the APE.
Version support for Sflow:
OTM supports only Sflow v5. If the switch doesn’t support Sflow v5, then it should provide us raw traffic through SPAN port and we can use our Netflow generator to process it.