jay alvarez wrote: > I'm only worried because I might be displaying erroneous reports, let's say I > use flow-stat to report the top destination or source AS.
In that case you probably want origin-as. Which version you choose depends on what data you want to mine and if you want to know about the ultimate source or destination of the traffic then you want origin-as. If you want to discover more about which upstream is sending you the traffic then you want peer-as. Mark. _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
