Some flow tools can take a BGP feed to add that information in. I beleive PMACCT is one of them.
----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest Internet Exchange http://www.midwest-ix.com ----- Original Message ----- From: "George Skorup" <[email protected]> To: [email protected] Sent: Friday, December 11, 2015 5:20:15 PM Subject: Re: [AFMUG] Useful IP addresses for netflow analysis Did MT ever put BGP AS info in their implementation of Netflow on RouterOS? Last time I looked, it wasn't there. On 12/11/2015 5:13 PM, Cassidy B. Larson wrote: > Normally with flow data you can export the origin AS. In your app just search > for the appropriate ASN of the ORG you want to search for. On my net flow > graphical viewer I have a “top 10 talkers by ASN” list.. > > >> On Dec 11, 2015, at 3:47 PM, Darren Shea <[email protected]> wrote: >> >> I have tried repeatedly to Google this, but I can't seem to find what I'm >> looking for (or can't seem to find the right keywords): >> >> I'd like to see if anyone has a list of IP addresses used by the big CDNs, >> Netflix pipes, Microsoft and Apple updater systems, major email providers, >> etc. ManageEngine's Netflow Analyzer comes with a small handful, but it's >> not very extensive, and manually finding and associating IP addresses and >> ranges to appropriate groups for meaningful data collection is both tedious >> and imprecise. Is there a list of this sort to be found anywhere? >> >> Thanks in advance, >> Darren >> >>
