I'm working on a project where I could need Nexus 5600. These switches support sampled netflow and not netflow. I would like to use netflow to do stats and to analyze trafic at some specific times.
Is sampled netflow good for watching trafic at a time where I underwent a problem? I mean, as it exports just a rate of packets, I won't have a good view of the amount of trafic that passed really?
I'm hesistating between sampled netflow and SPAN with a netflow 3000 appliance. It could be a good solution too but the switch can just handle 2 sessions?
What do you recommend?