[j-nsp] Inline jflow AS Lookup Failures

Drew Weaver drew.weaver at thenap.com
Fri Jun 28 12:51:05 EDT 2013


Howdy,

I am wondering if anyone has figured out any way to get inline jflow to send proper dstas/srcas on routers with full tables?

I'm seeing a lot of these incrementing (snipped output):

show services accounting errors inline-jflow
    Route Record Lookup Failures: 5415, AS Lookup Failures: 15775477
show services accounting errors inline-jflow
    Route Record Lookup Failures: 5415, AS Lookup Failures: 15776293
What this ends up doing in practice is sending ff ff ff ff (or 4294967295) for the ASN..

Which ends up looking like:

[root at d6 etc]# /usr/local/bin/nfdump -r /var/netflow/nc/nfcapd.current -s dstas/bytes 'router ip 192.168.25.7 and out if 555' -qN
2013-06-27 22:23:02.827 52026.907 any          4294967295      996(20.3)     2201(14.9)   420620(17.1)        0       64   191

In other words, totally useless.

Any tips?


More information about the juniper-nsp mailing list