Hi Folks,
As Ashvin mentioned it is done in pfe; so we should be careful in limiting or enabling it based on the volume of traffic getting logged. Else, we can expect high amount of traffic destined to RE from PFE due to these actions and host traffic may get chocked. On a safer side use this for troubleshooting .