It's useful for figuring out who you are sending traffic to and who is sending traffic to you so you can plan peering arrangements and transit.
thanks, -Drew -----Original Message----- From: Dave Ellingsberg [mailto:[email protected]] Sent: Thursday, October 28, 2010 9:59 AM To: 'Ed Ravin'; Drew Weaver Cc: [email protected] Subject: Re: [Flow-tools] IPv6 Support What is this fixation with top talkers? With most links at speeds of 100mb or better we should really be looking for the low and slow stalkers! Bigfoot. >>> From: 'Ed Ravin' <[email protected]> To: Drew Weaver <[email protected]> Date: 10/28/10 8:55 AM Subject: Re: [Flow-tools] IPv6 Support CC: "[email protected]" <[email protected]> On Thu, Oct 28, 2010 at 08:24:23AM - 0400, Drew Weaver wrote: > So you can do stuff like this in nfdump? > > ./flow- cat /var/netflow/ft/ft- v05.2010- 10* | ./flow- filter - Dnetwork | > ./flow- stat - f19 - S2 | more > > To find a list of the top AS numbers sending you traffic? More or less - they support AS aggregation reports, assuming you have AS data in the flow records, but you'd need to sort it yourself afterwards. _______________________________________________ Flow- tools mailing list flow- [email protected] http://mailman.splintered.net/mailman/listinfo/flow- tools _______________________________________________ Flow-tools mailing list [email protected] http://mailman.splintered.net/mailman/listinfo/flow-tools
