I want to enable Netflow on N5K-5672UP and send it to my Netflow analyzer to detect the DDoS attacks but before that, i want to know if that switch has a built-in in chipset or ASIC for Netflow or not. If i enable Netflow during high and volumetric DDoS attacks it does not affect the switch CPU performance?

Thank you.

  • There is nobody to help me?
    – Blackmetal
    Commented Dec 3, 2021 at 14:04

1 Answer 1


Wikipedia states that the Nexus 5600 use TCAM hardware to collect data. Some minor CPU overhead is to be expected due to NetFlow packet generation, depending on the sampling rate, but there shouldn't be more than that.

However, Cisco's NetFlow guide warns that NetFlow can cause high CPU load without going into detail. I guess that's for high-ratio sampling rates...

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.