[c-nsp] Actual traffic by ASN..?
Ryan O'Connell
ryan at complicity.co.uk
Sat Jan 28 15:24:16 EST 2006
On 27/01/2006 18:00, Richard J. Sears wrote:
>I am looking for an application (open source) that can provide me a
>realtime and historical view of traffic I have sent to specific ASNs as
>well as traffic I have sent through a specific ASN.
>
>We are doing more private peering and it seems that this would be very
>helpful.
>
>I was hoping to get feedback from those of you that are using this type
>of software as to what you think is the best.
>
>We are a 100% Cisco house running netflow already for some performance
>routing stuff we do.
>
>
This will partially depend on your hardware - if you have 7200s for
example, you can use mac-address-accounting on peering interfaces to
found out exactly how much you're getting to/from each peer. If you have
7600s however, mac-address-accounting isn't available (At least not in
SXD) so you have to use Netflow. Netflow will tell you how much is going
to/from each ASN but won't tell you how it's getting there. (E.g. if
you're peering with someone but they're sending traffic via your
upstream instead of direct)
I have some (not particularly elegant) netflow scripts I don't mind
sending you that will give daily textual reports of traffic per-ASN,
there's nothing really stopping you running it every 5 mins to give a
near-realtime view if you have the CPU power available.
More information about the cisco-nsp
mailing list