[c-nsp] Actual traffic by ASN..?

Kristian Larsson kristian at juniks.net
Mon Jan 30 17:38:41 EST 2006


On Sat, Jan 28, 2006 at 11:34:08PM -0200, Rubens Kuhl Jr. wrote:
> > I have some (not particularly elegant) netflow scripts I don't mind
> > sending you that will give daily textual reports of traffic per-ASN,
> > there's nothing really stopping you running it every 5 mins to give a
> > near-realtime view if you have the CPU power available.
> 
> I assume your scripts depend on having ASN information on the Netflow
> packets... I saw a good presentation on doing traffic analysis without
> having a full-routing table on the router, but the scripts to do that
> were not released.
> 
> Does somebody have or know any scripts that would do such a thing ?
> This implies using 3rd-party BGP data like route-views to run the
> analysis, but is really helpful when you are considering ASN, CIDR and
> peering agreements but the only thing you have is a default route.
I have written a script to do just that. It is
currently tailored for sFlow but could easily be
converted. Let me know if you're intersted.

  Kristian.


More information about the cisco-nsp mailing list