[c-nsp] netflow aggregation : as VS source-prefix

Tassos Chatzithomaoglou achatz at forthnet.gr
Tue Nov 18 13:20:40 EST 2008


I'm experimenting with netflow aggregation based on AS numbers (i'm interested mainly for the downstream direction) on 
two boxes, a 7200/G2 and a 7600/RSP720.

If i choose "as", then i have to run bgp on this box (although i don't need it). Also i don't know if the 
network=>as=>netflow "translation" will add any extra load to the netflow process.

If i choose "source-prefix", then i have to get the network<=>AS pairs from a web page or from another router that runs 
bgp and process it together with the netflow data.

Have you had any experiences with any of these two?

Which one will produce the lowest volume of netflow data?
Which one will have the lowest impact on cpu load?


--
Tassos


More information about the cisco-nsp mailing list