Hence, a continuing "feature request/enhancement" that I've asked for before -
i.e. "Sort by / Summarize by / Filter by" Source ASN and/or Dest ASN.
Would allow me to answer questions like:
1. "Which ASN am I receiving most of my traffic from/to, and hence, who
should I think about doing private peering with, to offset some of my transit
costs?"
2. "How much of my traffic goes/comes from Google?" (ASN 15169)
My Routers already send "Origin/Destination ASN" as part of their flow summary.
I don't know if the IMFlow collector is saving this information in the database
or simply dropping/ignoring it. I hope the former... Hence this should be "in
the pipeline" for a future IMFlows update to make this useful for traffic
planning purposes. (I dislike using 2 different tools of I can do it in one.!)
- Chris.
P.S. JunOS config for Netflow v5, which includes origin/destination ASN
information: http://juniper.cluepon.net/Cflowd_configuration
On 2011-05-25, at 6:37 AM, Paul Carlson wrote:
> Search by domain may not be practical since forward and reverse lookup may
> not resolve to the same domain.
>
> Though we have IM Flows, we use a different flow analyzer that allows us to
> search on ASN because of this.
>
> Paul
>
> On May 24, 2011, at 11:02 PM, Randy Baker wrote:
>
>> You can try 74.125.91.0/24, but you aren't guaranteed getting everything in
>> the google.com domain, or junk that is not google but is in that IP range.
>>
>> Randy
>>
>>> -----Original Message-----
>>> From: [email protected] [mailto:InterMapper-
>>> [email protected]] On Behalf Of Christopher Brizzell
>>> Sent: Friday, May 20, 2011 3:04 PM
>>> To: InterMapper Discussion
>>> Subject: [IM-Talk] Flows Question
>>>
>>> I am trying to find a way to see the traffic to/from a group of servers all
>>> in the
>>> same internet domain. For example *.google.com
>>>
>>> It doesn't look like wildcard can be used in the flows program. Is there any
>>> other way to do this?
____________________________________________________________________
List archives:
http://www.mail-archive.com/intermapper-talk%40list.dartware.com/
To unsubscribe: send email to: [email protected]
