Difference between revisions of "Deduplication in GigaFlow"
From Observer GigaFlow Support | VIAVI Solutions Inc.
(→Changing the Default Settings) |
(→Changing the Default Settings) |
||
| Line 6: | Line 6: | ||
GigaFlow's deduplication behaviour can be modified at '''System > Global > General'''. | GigaFlow's deduplication behaviour can be modified at '''System > Global > General'''. | ||
| − | |||
{| class="wikitable" | {| class="wikitable" | ||
| Line 13: | Line 12: | ||
! Ignore Duplicates on Summaries | ! Ignore Duplicates on Summaries | ||
! Result | ! Result | ||
| + | |- | ||
| + | | '''Yes''' | ||
| + | | '''Yes''' | ||
| + | | '''This is the default setting'''. GigaFlow will fully process and store the duplicates but the byte/flow/packet count against interfaces will not be affected by the duplicates. This is important for capacity planning. | ||
|- | |- | ||
| No | | No | ||
| | | | ||
| GigaFlow will disable all processing of duplicate flows, i.e. no storage, no forensics, no summaries. These will be accounted for as increments to the duplicates counter on the device | | GigaFlow will disable all processing of duplicate flows, i.e. no storage, no forensics, no summaries. These will be accounted for as increments to the duplicates counter on the device | ||
| − | |||
| − | |||
| − | |||
| − | |||
|- | |- | ||
| Yes | | Yes | ||
Latest revision as of 12:02, 27 September 2019
Overview
GigaFlow can deduplicate flows although it is not recommended by default. Duplicate flows can be used for forensic analysis, e.g. in the situation where an IP pair is received by a router on an ingress port, deduplication reduces the information available for trouble-shooting.
Changing the Default Settings
GigaFlow's deduplication behaviour can be modified at System > Global > General.
| Process Duplicate Flows | Ignore Duplicates on Summaries | Result |
|---|---|---|
| Yes | Yes | This is the default setting. GigaFlow will fully process and store the duplicates but the byte/flow/packet count against interfaces will not be affected by the duplicates. This is important for capacity planning. |
| No | GigaFlow will disable all processing of duplicate flows, i.e. no storage, no forensics, no summaries. These will be accounted for as increments to the duplicates counter on the device | |
| Yes | No | GigaFlow will fully process and store the duplicates and the byte/flow/packet count against interfaces will be affected by the duplicates. This is not good for capacity planning. |
