Another option is to filter on the IP subnets. If they have fixed ip addresses, then this is probably going to be the easiest of all options.
If the IP is dynamic, then provided that you retain logs of the IPs that are allocated, you will be able to write a script that builds a filter configuration file to extract flows for a certain IP address during the times that the customer was connected. We're currently during this for dial-up customers by extracting data from the radius logs. Bear in mind that if you have multiple exporters, then you will also need to filter out all but the directly connected router, otherwise you will get duplicate flows from other exporters by using this method. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Geoffrey Bradford Sent: Friday, 7 January 2005 12:39 AM To: 'Goran Sorak'; [email protected] Subject: RE: [Flow-tools] Changeable ifIndex I create WAN reports from NetFlow that aggregate by the WAN interface. In my case I keep an intermediate mapping table of ifDescr -> ifIndex which is updated a couple of times a day from SNMP polling of the SNMP interfaces table ifEntry. This has been adequate for us. There is a Cisco IOS command "snmp-server ifindex persist" which is supposed to keep indexes from changing, we investigated but never had a need to implement. There is plenty of info about this command at the Cisco web site. http://www.cisco.com/warp/public/477/SNMP/ifIndex_Persistence.html Geoff Bradford Principal Consultant International Network Services -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Sorak Sent: Thursday, January 06, 2005 12:37 AM To: [email protected] Subject: [Flow-tools] Changeable ifIndex Can flow-tools deal with changeable ifIndex values associated with customers? Explanation: We want to get per-customer flow statistics. Customers are dynamically allocated ifIndex, but the ifAlias associated with the customer is fixed. Can we get per-customer based statistics if the only way to identify customer is ifAlias value? (per-interface aggregations work on ifIndex, so they are not valid for this case). (Probably not for this list, but: can cisco Flow collector deal with this case?) Thanks Goran ********************************************************************** If you receive this email in error, please let us know by reply email, delete it from your system and destroy any copies. We give no warranties in relation to the accuracy or completeness of the information contained in this email. This email is also subject to copyright. ********************************************************************** _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools --- This email and any files transmitted with it are confidential to the intended recipient and may be privileged. If you have received this email inadvertently or you are not the intended recipient, you may not disseminate, distribute, copy or in any way rely on it. Further, you should notify the sender immediately and delete the email from your computer. Whilst we have taken precautions to alert us to the presence of computer viruses, we cannot guarantee that this email and any files transmitted with it are free from such viruses. _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
