We are starting to look at Network/Traffic Analyzers.

What we have noticed is that you get different results from sFlow or SNMP.

Same switch, same ports, but sFlow is usually a little behind SNMP in reported traffic metrics. sFlow also gives more info about the traffic (IP's and DNS) Where as SNMP is basically "here is how much you are using" with no details.

Anything else?