[c-nsp] netflow aggregation : as VS source-prefix
Tassos Chatzithomaoglou
achatz at forthnet.gr
Tue Nov 18 13:20:40 EST 2008
I'm experimenting with netflow aggregation based on AS numbers (i'm interested mainly for the downstream direction) on
two boxes, a 7200/G2 and a 7600/RSP720.
If i choose "as", then i have to run bgp on this box (although i don't need it). Also i don't know if the
network=>as=>netflow "translation" will add any extra load to the netflow process.
If i choose "source-prefix", then i have to get the network<=>AS pairs from a web page or from another router that runs
bgp and process it together with the netflow data.
Have you had any experiences with any of these two?
Which one will produce the lowest volume of netflow data?
Which one will have the lowest impact on cpu load?
--
Tassos
More information about the cisco-nsp
mailing list