netfw sampler question

Dears,
I have to configure the following example:
Configure netflow that displays the 3 top-talkers for ICMP traffic and randomly sample traffic at a rate of one-out-of 5 packets. I have found the below two methods to configure it. Can someone please explain the difference:

1st:
----
flow-sampler ICMP
 mode random one-out-of 5
ip access-list e ICMP_ACL
 permit icmp any any
class-map ICMP_CMAP
 match access-group ICMP_ACL
policy-map ICMP_PMAP
 class ICMP_CMAP
  netflow-sampler ICMP
ip flow-top-talkers
 top 3
 sort-by packets
 match class-map ICMP

2nd:
-----
flow-sampler ICMP
 mode random one-out-of 5
ip flow-top-talkers
 top 3
 sort-by packets
 match protocol 1
 match flow-sampler ICMP

 

Sign In or Register to comment.