[j-nsp] Inline jflow AS Lookup Failures
Drew Weaver
drew.weaver at thenap.com
Fri Jun 28 12:51:05 EDT 2013
Howdy,
I am wondering if anyone has figured out any way to get inline jflow to send proper dstas/srcas on routers with full tables?
I'm seeing a lot of these incrementing (snipped output):
show services accounting errors inline-jflow
Route Record Lookup Failures: 5415, AS Lookup Failures: 15775477
show services accounting errors inline-jflow
Route Record Lookup Failures: 5415, AS Lookup Failures: 15776293
What this ends up doing in practice is sending ff ff ff ff (or 4294967295) for the ASN..
Which ends up looking like:
[root at d6 etc]# /usr/local/bin/nfdump -r /var/netflow/nc/nfcapd.current -s dstas/bytes 'router ip 192.168.25.7 and out if 555' -qN
2013-06-27 22:23:02.827 52026.907 any 4294967295 996(20.3) 2201(14.9) 420620(17.1) 0 64 191
In other words, totally useless.
Any tips?
More information about the juniper-nsp
mailing list