Mark,
The only example I've seen of that was done by some experimental
flowscan CampusIO extensions.
http://dave.plonka.us/FlowScan/CampusIO.html
It looks to me like this is supposed to keep using origin-as, but
generate reports for peer-as data.
I'd be interested to know if it works...
Thanks,
Shane
You'd need
BGPDumpFile
This directive is optional and is experimental. In combination with TopN
and ASNFile it causes FlowScan to produce ``Top ASN'' reports which show
the ``top'' Autonomous Systems with which your site exchanges traffic.
The BGPDumpFile value is the name of a file containing the output of
show ip bgp from a Cisco router, ideally from the router that is
exporting flows. If this option is used, and the specified file exists,
it will cause the ``originAS'' and ``pathAS'' reports to be generated.
ASNFile
This directive is optional and is only useful in conjunction with
BGPDumpFile. If specified, this directive will cause the AS names rather
than just their numbers to appear in the Top ASN HTML reports. Its value
should be the path to a file having the format of the file downloaded
from this URL:
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of jay alvarez
Sent: Wednesday, January 24, 2007 10:36 PM
To: Mark Prior
Cc: flow tools
Subject: Re: [Flow-tools] In my case, should I choose peer-as or
origin-as??
----- Original Message ----
From: Mark Prior <[EMAIL PROTECTED]>
To: jay alvarez <[EMAIL PROTECTED]>
Cc: flow tools <[email protected]>
Sent: Thursday, January 25, 2007 2:26:18 PM
Subject: Re: [Flow-tools] In my case, should I choose peer-as or
origin-as??
jay alvarez wrote:
> > I'm only worried because I might be displaying erroneous reports,
let's say I use flow-stat to report the top destination or source AS.
> In that case you probably want origin-as.
What if I want to accomplish both getting reports for top
source/destination AS as well as compare the traffic of each of our
providers? I remember writing down each AS of our providers in CUFlow.cf
and using CUGrapher.pl, I'm creating composite in and out traffic graphs
of those four providers.. Given all of our routers configured with
origin-as, does that mean I am displaying wrong graphs with our upstream
providers?
> Which version you choose depends on what data you want to mine and if
> you want to know about the ultimate source or destination of the
traffic
> then you want origin-as. If you want to discover more about which
> upstream is sending you the traffic then you want peer-as.
> Mark.
________________________________________________________________________
____________
No need to miss a message. Get email on-the-go
with Yahoo! Mail for Mobile. Get started.
http://mobile.yahoo.com/mail
_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools
_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools
