cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Join Customer Connection to register!
194
Views
0
Helpful
0
Replies
arcanain
Beginner

How to check if flowspeck works based on netflow monitoring?

I want to know how many pkts were matched and dropped by my flowspec rule.

I'm looking at netflow9 docs and only usable field I find is FORWARDING STATUS. However if I set my flowspec rule to discard pkts which have size larger then 400 I have some mix of forwarded and discarded status. On top of that Router discards some of the pkts by itself.

Is there anyway to determine how many pkts have been matched to my flowspec rule?

0 REPLIES 0