Patent attributes
The techniques described herein may dynamically adjust the sampling threshold based on a comparison of a flow export rate to a configured flow export rate. Based on the comparison of the flow export rate and the configured flow export rate, the network device may dynamically adjust the sampling threshold, such as increasing, reducing, or not changing the sampling threshold. Moreover, traffic flows are exported based on the adjusted sampling threshold. For example, if a number of bytes of a packet flow is more than or equal to the adjusted sampling threshold, network devices may export the sampled packet flow with the byte count and packet count of the sampled packet flow reported as-is. When a number of bytes of a packet flow is less than the adjusted sampling threshold, the packet flow will be exported with the byte count and packet count adjusted according to a probability.