Howdy, I am wondering if anyone has figured out any way to get inline jflow to send proper dstas/srcas on routers with full tables?
I'm seeing a lot of these incrementing (snipped output): show services accounting errors inline-jflow Route Record Lookup Failures: 5415, AS Lookup Failures: 15775477 show services accounting errors inline-jflow Route Record Lookup Failures: 5415, AS Lookup Failures: 15776293 What this ends up doing in practice is sending ff ff ff ff (or 4294967295) for the ASN.. Which ends up looking like: [root@d6 etc]# /usr/local/bin/nfdump -r /var/netflow/nc/nfcapd.current -s dstas/bytes 'router ip 192.168.25.7 and out if 555' -qN 2013-06-27 22:23:02.827 52026.907 any 4294967295 996(20.3) 2201(14.9) 420620(17.1) 0 64 191 In other words, totally useless. Any tips? _______________________________________________ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp