Hi Dave, It's a Juniper MX80 running 11.4R8, it appears to support 32 bit ASN, however you are correct whenever it goes to export a flow record with a 32bit ASN it is exporting the 32bit ASN as:
4294967295 which translates to ff ff ff ff (or the "last" 32bit ASN). It's configured for inline flow.. Not sure why it's doing this. Thanks, -Drew -----Original Message----- From: Dave Deitrich [mailto:[email protected]] Sent: Thursday, June 27, 2013 4:41 PM To: [email protected] Subject: Re: [Nfdump-discuss] AS 23456 instead of 32 bit ASN On 6/27/13 10:12 AM, Drew Weaver wrote: > When I nfdump data it always shows AS 23456 instead of the actual 32 bit ASN. > From what I read nfdump supports 32 bit ASN, has anyone seen this before? AS 23456 is a placeholder ASN that's used whenever a router doesn't support 4-byte AS numbers. There's some good reference info here: <https://sites.google.com/site/amitsciscozone/home/bgp/understanding-bgp-4-byte> nfdump definitely supports 4-byte ASNs. It could be that whatever device you're using to export flows (or wherever it's getting BGP data from) does not. Is there any way you can do BGP lookups directly on the exporting device? -- Dave Deitrich [email protected] ------------------------------------------------------------------------------ This SF.net email is sponsored by Windows: Build for Windows Store. http://p.sf.net/sfu/windows-dev2dev _______________________________________________ Nfdump-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfdump-discuss ------------------------------------------------------------------------------ This SF.net email is sponsored by Windows: Build for Windows Store. http://p.sf.net/sfu/windows-dev2dev _______________________________________________ Nfdump-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
