[c-nsp] Actual traffic by ASN..?

Ryan O'Connell ryan at complicity.co.uk
Sat Jan 28 15:24:16 EST 2006


On 27/01/2006 18:00, Richard J. Sears wrote:

>I am looking for an application (open source) that can provide me a
>realtime and historical view of traffic I have sent to specific ASNs as
>well as traffic I  have sent through a specific ASN.
>
>We are doing more private peering and it seems that this would be very
>helpful.
>
>I was hoping to get feedback from those of you that are using this type
>of software as to what you think is the best.
>
>We are a 100% Cisco house running netflow already for some performance
>routing stuff we do.
>  
>

This will partially depend on your hardware - if you have 7200s for 
example, you can use mac-address-accounting on peering interfaces to 
found out exactly how much you're getting to/from each peer. If you have 
7600s however, mac-address-accounting isn't available (At least not in 
SXD) so you have to use Netflow. Netflow will tell you how much is going 
to/from each ASN but won't tell you how it's getting there. (E.g. if 
you're peering with someone but they're sending traffic via your 
upstream instead of direct)

I have some (not particularly elegant) netflow scripts I don't mind 
sending you that will give daily textual reports of traffic per-ASN, 
there's nothing really stopping you running it every 5 mins to give a 
near-realtime view if you have the CPU power available.


More information about the cisco-nsp mailing list