[j-nsp] cflowd ASN lookup

Richard A Steenbergen ras at e-gerbil.net
Thu Dec 13 15:06:38 EST 2007


On Thu, Dec 13, 2007 at 09:31:58AM -0800, Chris Kawchuk wrote:
> Ensure your stanza looks something like this:
> 
> forwarding-options { 
>    sampling { 
>        input { 
>            family inet { 
>                rate 10; 
>                run-length 10; 
>                max-packets-per-second 7000; 
>            } 
>        } 
>        output { 
>            cflowd 172.28.1.14 { 
>                port 9996; 
>                source-address 10.2.1.11; 
>                version 5; 
>                no-local-dump; 
>                autonomous-system-type origin; 
>            } 
>        } 
>    } 
> } 
> 
> You may be missing the "autonomous-system-type origin" entry.

You also have to configure "routing-options route-record" as well. Note 
that this increases your memory and CPU use, and it has to constantly copy 
the routing table data from rpd to the sampled process. If you don't need 
AS data in your flow export, don't configure this.

-- 
Richard A Steenbergen <ras at e-gerbil.net>       http://www.e-gerbil.net/ras
GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC)


More information about the juniper-nsp mailing list