Re: Real world sflow vs netflow?

[Nick Hilliard <nick () foobar org>]

On 17/07/2012 16:32, Simon Leinen wrote:
> That's one reason, but another reason would be that at least in Netflow
> (but sFlow may be similar depending on how you use it), the reported
> byte counts only include the sizes of the "L3" packets, i.e. starting at
> the IP header, while the SNMP interface counters (ifInOctets etc.)
> include L2 overhead such as Ethernet frame headers and such.

sflow includes both figures.

Nick