Hi guys,

I'm using Juniper hardware to sample traffic and dump it to NetFlow
data. In my config, the sampling rate is 1000, run-length is 0.

According to the docs [1], this means that 1 out of 1000 packets per
flow is sampled. Does this mean that *always* the first (1001st, 2001st,
3001st, ...) packet of a flow is included (as the figure in the docs
suggests) or is the sampling more random?

And if sampling is done more random: Can I miss flows due to packet
sampling, e.g., if flows have fewer than 1000 packets?

Thanks a lot for your help,
Chris

[1]:
http://www.juniper.net/techpubs/software/junos/junos94/swconfig-policy/configuring-traffic-sampling.html#id-11354799
_______________________________________________
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

Reply via email to