On 18/01/2012 12:14, Gert Doering wrote: > Ouch. What is it doing there? Sounds like it has some sort of lookup > cache to get the AS number, and needs to rebuild that...
I suspect so. > Some nice addition to netflow would be to have "origin *and* peer AS", > just btw... depending on which link I'm trying to do statistics, I > need "peer AS" [IXPs] or "origin AS" [behind transit links]...) You can use a combination of BGP origin-as and BGP nexthop address for this. Not sure if it works on the sup720, but it certainly works on other platforms. There's a patch for nfsen to support sorting by BGP nexthop - very useful if the hardware supports it: > http://sourceforge.net/tracker/download.php?group_id=134525&atid=730180&file_id=394081&aid=3115740 Nick _______________________________________________ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
