Dears,
I have to configure the following example:
Configure netflow that displays the 3 top-talkers for ICMP traffic and randomly sample traffic at a rate of one-out-of 5 packets. I have found the below two methods to configure it. Can someone please explain the difference:
1st:
----
flow-sampler ICMP
mode random one-out-of 5
ip access-list e ICMP_ACL
permit icmp any any
class-map ICMP_CMAP
match access-group ICMP_ACL
policy-map ICMP_PMAP
class ICMP_CMAP
netflow-sampler ICMP
ip flow-top-talkers
top 3
sort-by packets
match class-map ICMP
2nd:
-----
flow-sampler ICMP
mode random one-out-of 5
ip flow-top-talkers
top 3
sort-by packets
match protocol 1
match flow-sampler ICMP