1. Given an L3 GEC comprised of four GigE ports that interconnects a distribution-layer router and an access-layer router, if I have netflow enabled on the distribution end of the GEC, is there any reason/benefit that I should enable netflow on the four underlying GigE ports (on the distribution side) as well?
2. I thought since netflow cache is only being enabled on the distribution side, the only traffic my netflow tool could report on would be conversations between hosts in that specific access-layer area and hosts outside the area. The reality appears to be the opposite: The conversations reported by the netflow tool all seem to be host-to-host within that specific access-layer. I tried to search for known traffic between my PC to a server there, but came up empty. Could anyone explain this phenomenon?
