[c-nsp] src_ASN and dest_ASN in Netflow record

Oliver Boehmer (oboehmer) oboehmer at cisco.com
Mon Apr 3 04:33:07 EDT 2006


Joe Shen <> wrote on Monday, April 03, 2006 10:09 AM:

> We collect netflow traffic on our edge router.
> According to netflow document, router will insert
> src_ASN and dest_ASN  according to BGP routing table.
> 
> Our edge router only has a limited part of internet
> route table in which a 0.0.0.0/0.0.0.0 is used.
> 
> How will the router insert SRC_ASN and Dest_ASN when a
> packet is forwarded according to default route?

Speaking for Cisco (as j-nsp is also copied): the AS info is stored in
the FIB for Netflow to pick it up. So unless 0/0 is learned via BGP,
source and/or dest-ASN will be zero when addresses/flows resolve through
the default route.

	oli



More information about the cisco-nsp mailing list