We have a DCRUM where the license capacity is breached most of the time during non-office hour (midnight).
I am thinking of writing a cronjob to bring down the interface where the midnight-traffic is coming in.
But before I try that out, I would like to know first if the license would still count if I bring down the interface? Or I would have to physically unplugged the cable from my AMD then only the license won't count those traffic?
Capacity license counts all traffic that flows through the driver connected to sniffing NICs. If you turn the NIC down, it won't forward any packets to the driver, so it shouldn't count them anymore.
To be honest, it would be a weird solution though. If traffic on those links is not important, then perhaps it's more efficient to filter it out on the network packet broker or on SPAN ports?