Re: Carpet bombing, what's it look like now

Saku Ytti via NANOG <[email protected]> Sat, 1 Aug 2026 11:06:26 +0300
Newsgroups gmane.org.operators.nanog
Message-ID <CAAeewD8hZrSsD-mVVFX4FFq_oB9ahgW_RSUksxZ1NiYW0jM1qw@mail.gmail.com>
On Sat, 1 Aug 2026 at 10:05, Vincent Bernat via NANOG
<[email protected]> wrote:

> > IPFIX. But sampling rate is making things tricky, as very short term
> > attacks are a thing.
>
> IPFIX IE 315 fixes this. It also makes it easier to grab any field from

How does IE 315 fix sampling issues? You can use 1:1 with or without
IE 315? Only thing IE 315 allows you to send sflow style raw frames?

My issue with 1:1 isn't that my platform doesn't support it, it's that
it increases backend costs in a way that I cannot justify.

-- 
  ++ytti
_______________________________________________
NANOG mailing list 
https://lists.nanog.org/archives/list/[email protected]/message/KI7R7YYC7G6HKS7L52F5EKLKDO4OFRZC/