[c-nsp] Actual traffic by ASN..?

Peter Kranz pkranz at unwiredltd.com
Sat Jan 28 19:48:24 EST 2006


http://software.uninett.no/stager/

Nice reporting tool for your netflow data...

Peter Kranz
Founder/CEO - Unwired Ltd
Mobile: 510-207-0000
pkranz at unwiredltd.com        


-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Ryan O'Connell
Sent: Saturday, January 28, 2006 12:24 PM
To: rsears at adnc.com
Cc: cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] Actual traffic by ASN..?

On 27/01/2006 18:00, Richard J. Sears wrote:

>I am looking for an application (open source) that can provide me a
>realtime and historical view of traffic I have sent to specific ASNs as
>well as traffic I  have sent through a specific ASN.
>
>We are doing more private peering and it seems that this would be very
>helpful.
>
>I was hoping to get feedback from those of you that are using this type
>of software as to what you think is the best.
>
>We are a 100% Cisco house running netflow already for some performance
>routing stuff we do.
>  
>

This will partially depend on your hardware - if you have 7200s for 
example, you can use mac-address-accounting on peering interfaces to 
found out exactly how much you're getting to/from each peer. If you have 
7600s however, mac-address-accounting isn't available (At least not in 
SXD) so you have to use Netflow. Netflow will tell you how much is going 
to/from each ASN but won't tell you how it's getting there. (E.g. if 
you're peering with someone but they're sending traffic via your 
upstream instead of direct)

I have some (not particularly elegant) netflow scripts I don't mind 
sending you that will give daily textual reports of traffic per-ASN, 
there's nothing really stopping you running it every 5 mins to give a 
near-realtime view if you have the CPU power available.
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/



More information about the cisco-nsp mailing list