sup720: difference between "ip flow ingress" and "mls netflow sampling"

[Konstantin Dunaev]

Hi,

we're using Netflow on our SUP720 and I still don't understand the difeerence between interface commands:

"mls netflow sampling"

and

"ip flow ingress"

what kind of traffic process each of those command?

What is the difference?

[mchin345]

mls netflow sampling:

Depending on the current flow mask, sampled NetFlow can be global or per-interface based. For Interface-Full and Interface-Src-Dest flow masks, sampled NetFlow is per-interface based. For all the other flow masks, sampled NetFlow is always global and turned on/off for all interfaces.

Sampled NetFlow is supported on systems configured with a Supervisor Engine 2 and on Layer 3 interfaces only.

ip flow ingress:

If you configure the ip flow ingress command on a few selected subinterfaces and then configure the ip route-cache flow command on the main interface, enabling the main interface will overwrite the ip flow ingress command and data collection will start from the main interface as well as all the subinterfaces.

[Konstantin Dunaev]

ok, it's clear for.

but the question was what is the difference ín Netflow data if use those commands.

I mean you can use either only "ip flow ingress" or you can use only "mls netflow" or you can use both on the same interface.

what will be the difference in Netflow data?