[flow-tools] FW: Has anyone tried this before / know how possible it is?

[Michael Janke]

Will Lotto wrote:
....

 > Ie.
 >
 >                         ----[collector] --> [Dir #1]----
 >                       /                                         \
 > [Cisco 7200] <                                             > [ Merged
 > flows (duplicates removed) ] ---> [Stats / Billing / etc.]
 >
 >                      \                                          /
 >                        ----[collector] --> [Dir #2] ----
 >
 >

It seems that if collector #1 and #2 were on different hosts and on different
router interfaces you'd have a fair amount of redundancy at a lost cost.

I don't see why the merge is necessary. As long as collector #1 is working, use
its data.

If collector #1 fails, use #2 for stats & billing. Failover could be simple/manual
or complex/automatic. Collector #2 could have less disk/processor, as it only
keeps flows for a short period of time -- the time it takes you to figure
out #1 is dead/broke + failover time.

-----------------------------------------
Michael Janke
Minnesota State Colleges and Universities
-----------------------------------------