[c-nsp] Flow tools

[Nick Hilliard]

On 18/01/2012 12:14, Gert Doering wrote:
> Ouch.  What is it doing there?  Sounds like it has some sort of lookup
> cache to get the AS number, and needs to rebuild that...

I suspect so.

> Some nice addition to netflow would be to have "origin *and* peer AS",
> just btw...  depending on which link I'm trying to do statistics, I
> need "peer AS" [IXPs] or "origin AS" [behind transit links]...)

You can use a combination of BGP origin-as and BGP nexthop address for
this.  Not sure if it works on the sup720, but it certainly works on other
platforms.  There's a patch for nfsen to support sorting by BGP nexthop -
very useful if the hardware supports it:

> http://sourceforge.net/tracker/download.php?group_id=134525&atid=730180&file_id=394081&aid=3115740

Nick