Hello team, I have a wierd issue.
We run HP switches and I have been removing any ports not monitored or no longer need to be monitored right across the board of 80+ switches.
So, on my core switch (HP5412zl version1), I removed sflow fully and disabled it. I re-enabled it, thus clearing all of the sflow information inside the switch. I double checked the (sho run) to make sure that the data was gone.
I did a write memory to commit this change.
I re-added all of the interfaces that we need to monitor, re-setup sampling and polling accordingly.
For the last week, I have been troubleshooting the unmonitored netflow interfaces in my events on the solar wind side. I still have interfaces showing up here that are 100% not sending traffic, according to my switch, they were however monitored in the past.
My only thought would be to delete the node from solar winds fully and re build that side of things.
I also have no clue why solar winds would see this data, unless the switch was actually sending it. Its not regular like sflow is normally, and its not at a specific time.
Here is a screen shot.
Any advice would be great.