Re: [j-nsp] cflowd ASN lookup

2007-12-14 Thread Aden Bos
Richard A Steenbergen wrote: On Thu, Dec 13, 2007 at 09:31:58AM -0800, Chris Kawchuk wrote: Ensure your stanza looks something like this: forwarding-options { sampling { input { family inet { rate 10; run-length 10;

Re: [j-nsp] cflowd ASN lookup

2007-12-13 Thread Hyunseog Ryu
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Did you have BGP routing table copy in your cflowd box, and specify the location ? That's the source of learning which AS number matches for which BGP prefix from flow data. Hyun Aden Bos wrote: Hi, I have configured cflowd on an m7i, but the

Re: [j-nsp] cflowd ASN lookup

2007-12-13 Thread Aden Bos
Hyunseog Ryu wrote: Did you have BGP routing table copy in your cflowd box, and specify the location ? That's the source of learning which AS number matches for which BGP prefix from flow data. Hyun Aden Bos wrote: Hi, I have configured cflowd on an m7i, but the flow data doesn't seem

Re: [j-nsp] cflowd ASN lookup

2007-12-13 Thread Chris Kawchuk
Ensure your stanza looks something like this: forwarding-options { sampling { input { family inet { rate 10; run-length 10; max-packets-per-second 7000; } } output { cflowd 172.28.1.14

Re: [j-nsp] cflowd ASN lookup

2007-12-13 Thread sthaug
You also have to configure routing-options route-record as well. Note that this increases your memory and CPU use, and it has to constantly copy the routing table data from rpd to the sampled process. If you don't need AS data in your flow export, don't configure this. This may have been