I remember back when I was using cflowd I had to copy the bgp tables from a router to cflowd every so often to get this type of report. How does flow-tools do it?
On Thu, 2005-02-17 at 09:07 -0800, John Haskins wrote: > Source AS 0 means the exporting router had no AS-path info for the route > back to the source at the time the record was written. Could be your > AS, or prefixes for which you have no route in BGP, or a prefix where > you had a more specific route in IGP so the BGP route was not used. All > of your outbound traffic will also usually have source AS 0. > > This will show you what inbound flows are getting reported like that: > > flow-cat [foo] | flow-filter -i[outside if] -a0 | flow-stat -f24 -s0 > > Edson Manners wrote: > > > I have run a flow-stat with 2 days worth of flow information on netflow > > data coming into our network for Src AS sorted on octets. > > > > The very first entry is very interesting as the AS number is reported as > > 0. Why would this happen? What exactly does this mean? -- Edson Manners Academic Computing & Networking Services Florida State University (850)644-2591 ext. 144 _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
