Hi Andy, Does your device support netflow? That is the best answer for this sort of question.
If it does not, can you mirror the traffic to say a server and run ntop on that? Ian -----Original Message----- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Andy Saykao Sent: 25 September 2009 09:12 To: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Which IP's belong to AS1234? Thanks for the reply guys. What I'm trying to achieve is to monitor the bandwidth utilization on our Internet link. So for example we want to know how much bandwidth is being utilized by our customers so we can say "ah huh out of our 100M internet link, 90M of traffic is from youtube.com, so let's ask Google if they want to peer with us". The device we are using refers to the Internet as the external network. The device does not keep records of IP address information from the external network, but we can specify classes under the external network. So I could create a class called YouTube and associate the IPs 1.2.3.4 to 5.6.7.8 to this class and place it under the external network. The device is then able to report that the YouTube class consumed X amount of bandwidth on the external network interface. This is probably not the best way to go about it, but that's the limitation of the device. This is why I needed to know what IP blocks belong to AS1234, so I could find out how much traffic was actually coming from AS1234 on our Internet link. Cheers. Andy This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. Please notify the sender immediately by email if you have received this email by mistake and delete this email from your system. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the organisation. Finally, the recipient should check this email and any attachments for the presence of viruses. The organisation accepts no liability for any damage caused by any virus transmitted by this email. _______________________________________________ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ No virus found in this incoming message. Checked by AVG - www.avg.com Version: 8.5.409 / Virus Database: 270.13.112/2387 - Release Date: 09/24/09 05:52:00 -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the sender. Any offers or quotation of service are subject to formal specification. Errors and omissions excepted. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of Lumison. Finally, the recipient should check this email and any attachments for the presence of viruses. Lumison accept no liability for any damage caused by any virus transmitted by this email. _______________________________________________ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/