Re: Open source alternatives to UNINETT Stager for visual netflow peering analysis

2015-04-10 Thread Laurent Dumont
Nfsen is not a very elegant tool. It's very powerful, but it does 
require a fair amount of fiddling in order to get what you want out of it.


On 4/10/2015 12:44 PM, Christopher Morrow wrote:

There's also nfsen to go on top of nfdump ... which can let you create
views of the data showing per-as traffic stats.



On Fri, Apr 10, 2015 at 11:29 AM, Paul S. cont...@winterei.se wrote:

https://github.com/manuelkasper/AS-Stats does that precise job (and nothing
else)


On 4/11/2015 午前 12:24, Peter Kranz wrote:

We've really enjoyed the open source Stager platform for netflow analysis,
however the code has not seen updates in recent years. Looking for
alternative open source netflow analysis platforms with a web interface.
There are quite a few netflow tools around these days, and we are looking
for something that performs the steps needed to showing us traffic volumes
to particular AS#'s and their downstream customers for peering analysis
decisions. I can get coarse answers from nfdump, but would like something
more elegant for the NOC to use.


Peter Kranz
www.UnwiredLtd.com http://www.unwiredltd.com/
Desk: 510-868-1614 x100
Mobile: 510-207-
pkr...@unwiredltd.com mailto:pkr...@unwiredltd.com






--
Laurent Dumont
coldnorthadmin.com



Re: Open source alternatives to UNINETT Stager for visual netflow peering analysis

2015-04-10 Thread Mike Hammett
I got the impression that Peter was looking for it to also do downstream ASes. 
I don't get that impression from the AS-Stats page. 




- 
Mike Hammett 
Intelligent Computing Solutions 
http://www.ics-il.com 



- Original Message -

From: Paul S. cont...@winterei.se 
To: nanog@nanog.org 
Sent: Friday, April 10, 2015 10:29:02 AM 
Subject: Re: Open source alternatives to UNINETT Stager for visual netflow 
peering analysis 

https://github.com/manuelkasper/AS-Stats does that precise job (and 
nothing else) 

On 4/11/2015 午前 12:24, Peter Kranz wrote: 
 We've really enjoyed the open source Stager platform for netflow analysis, 
 however the code has not seen updates in recent years. Looking for 
 alternative open source netflow analysis platforms with a web interface. 
 There are quite a few netflow tools around these days, and we are looking 
 for something that performs the steps needed to showing us traffic volumes 
 to particular AS#'s and their downstream customers for peering analysis 
 decisions. I can get coarse answers from nfdump, but would like something 
 more elegant for the NOC to use. 
 
 
 
 Peter Kranz 
 www.UnwiredLtd.com http://www.unwiredltd.com/ 
 Desk: 510-868-1614 x100 
 Mobile: 510-207- 
 pkr...@unwiredltd.com mailto:pkr...@unwiredltd.com 
 
 
 




Re: Open source alternatives to UNINETT Stager for visual netflow peering analysis

2015-04-10 Thread Joe Loiacono
You could use FlowViewer with the flow-tools underlying collector option 
if you're collecting v5 netflow. This will permit you to keep long-term 
graphs (ala MRTG - Last 24 hours, Last 7 days, etc.) for each AS peer with 
5-minute granularity You can also graph specified time intervals at much 
smaller time-bucket sizes.

FlowViewer has an IPFIX (e.g., v9, FNF, etc.) underlying collector also; 
SiLK. However, last I checked, SiLK is not collecting AS information.

https://sourceforge.net/projects/flowviewer

Regards, 

Joe




From:   Peter Kranz pkr...@unwiredltd.com
To: nanog@nanog.org
Date:   04/10/2015 11:26 AM
Subject:Open source alternatives to UNINETT Stager for visual 
netflow peering analysis
Sent by:NANOG nanog-boun...@nanog.org



We've really enjoyed the open source Stager platform for netflow analysis,
however the code has not seen updates in recent years. Looking for
alternative open source netflow analysis platforms with a web interface.
There are quite a few netflow tools around these days, and we are looking
for something that performs the steps needed to showing us traffic volumes
to particular AS#'s and their downstream customers for peering analysis
decisions. I can get coarse answers from nfdump, but would like something
more elegant for the NOC to use.

 

Peter Kranz
www.UnwiredLtd.com http://www.unwiredltd.com/ 
Desk: 510-868-1614 x100
Mobile: 510-207-
pkr...@unwiredltd.com mailto:pkr...@unwiredltd.com 

 




The Cidr Report

2015-04-10 Thread cidr-report
This report has been generated at Fri Apr 10 21:14:35 2015 AEST.
The report analyses the BGP Routing Table of AS2.0 router
and generates a report on aggregation potential within the table.

Check http://www.cidr-report.org/2.0 for a current version of this report.

Recent Table History
Date  PrefixesCIDR Agg
03-04-15546119  299432
04-04-15546337  299359
05-04-15546063  299448
06-04-15546237  299694
07-04-15546379  299131
08-04-15546653  299930
09-04-15546540  300390
10-04-15546760  300226


AS Summary
 50225  Number of ASes in routing system
 20056  Number of ASes announcing only one prefix
  3180  Largest number of prefixes announced by an AS
AS10620: Telmex Colombia S.A.,CO
  120958464  Largest address span announced by an AS (/32s)
AS4134 : CHINANET-BACKBONE No.31,Jin-rong Street,CN


Aggregation Summary
The algorithm used in this report proposes aggregation only
when there is a precise match using the AS path, so as 
to preserve traffic transit policies. Aggregation is also
proposed across non-advertised address space ('holes').

 --- 10Apr15 ---
ASnumNetsNow NetsAggr  NetGain   % Gain   Description

Table 546653   300156   24649745.1%   All ASes

AS22773 3020  172 284894.3%   ASN-CXA-ALL-CCI-22773-RDC -
   Cox Communications Inc.,US
AS6389  2880   83 279797.1%   BELLSOUTH-NET-BLK -
   BellSouth.net Inc.,US
AS17974 2796   78 271897.2%   TELKOMNET-AS2-AP PT
   Telekomunikasi Indonesia,ID
AS39891 2473   20 245399.2%   ALJAWWALSTC-AS Saudi Telecom
   Company JSC,SA
AS28573 2314  285 202987.7%   NET Serviços de Comunicação
   S.A.,BR
AS3356  2552  757 179570.3%   LEVEL3 - Level 3
   Communications, Inc.,US
AS4755  2000  381 161980.9%   TATACOMM-AS TATA
   Communications formerly VSNL
   is Leading ISP,IN
AS4766  2918 1337 158154.2%   KIXS-AS-KR Korea Telecom,KR
AS6983  1752  248 150485.8%   ITCDELTA - Earthlink, Inc.,US
AS9808  1556   67 148995.7%   CMNET-GD Guangdong Mobile
   Communication Co.Ltd.,CN
AS6147  1602  159 144390.1%   Telefonica del Peru S.A.A.,PE
AS7303  1709  293 141682.9%   Telecom Argentina S.A.,AR
AS20115 1854  492 136273.5%   CHARTER-NET-HKY-NC - Charter
   Communications,US
AS10620 3180 1819 136142.8%   Telmex Colombia S.A.,CO
AS7545  2588 1363 122547.3%   TPG-INTERNET-AP TPG Telecom
   Limited,AU
AS4323  1622  408 121474.8%   TWTC - tw telecom holdings,
   inc.,US
AS9498  1314  110 120491.6%   BBIL-AP BHARTI Airtel Ltd.,IN
AS18566 2039  869 117057.4%   MEGAPATH5-US - MegaPath
   Corporation,US
AS8402  1154   24 113097.9%   CORBINA-AS OJSC Vimpelcom,RU
AS7552  1163   58 110595.0%   VIETEL-AS-AP Viettel
   Corporation,VN
AS22561 1337  256 108180.9%   CENTURYLINK-LEGACY-LIGHTCORE -
   CenturyTel Internet Holdings,
   Inc.,US
AS6849  1209  172 103785.8%   UKRTELNET JSC UKRTELECOM,UA
AS8151  1579  654  92558.6%   Uninet S.A. de C.V.,MX
AS7738   999   83  91691.7%   Telemar Norte Leste S.A.,BR
AS8452  1874  997  87746.8%   TE-AS TE-AS,EG
AS38285  983  114  86988.4%   M2TELECOMMUNICATIONS-AU M2
   Telecommunications Group
   Ltd,AU
AS4780  1083  256  82776.4%   SEEDNET Digital United Inc.,TW
AS4538  1778  956  82246.2%   ERX-CERNET-BKB China Education
   and Research Network
   Center,CN
AS26615  965  158  80783.6%   Tim Celular S.A.,BR
AS24560 1232  464  76862.3%   AIRTELBROADBAND-AS-AP Bharti
   Airtel Ltd., Telemedia
   Services,IN

Total  55525

BGP Update Report

2015-04-10 Thread cidr-report
BGP Update Report
Interval: 02-Apr-15 -to- 09-Apr-15 (7 days)
Observation Point: BGP Peering with AS131072

TOP 20 Unstable Origin AS
Rank ASNUpds %  Upds/PfxAS-Name
 1 - AS23752  261532  5.9%3189.4 -- NPTELECOM-NP-AS Nepal 
Telecommunications Corporation, Internet Services,NP
 2 - AS10029  235469  5.3% 516.4 -- CITYCOMNETWORKS-AS CITYCOM 
NETWORKS PVT LTD,IN
 3 - AS61894  173372  3.9%   43343.0 -- FreeBSD Brasil LTDA,BR
 4 - AS9829   173306  3.9% 129.5 -- BSNL-NIB National Internet 
Backbone,IN
 5 - AS22059  111920  2.5%   55960.0 -- APVIO-1 - Apvio, Inc.,US
 6 - AS36947   82214  1.8% 464.5 -- ALGTEL-AS,DZ
 7 - AS28573   78974  1.8%  23.0 -- NET Serviços de Comunicação 
S.A.,BR
 8 - AS21669   76722  1.7%   19180.5 -- NJ-STATEWIDE-LIBRARY-NETWORK - 
New Jersey State Library,US
 9 - AS370975043  1.7%2779.4 -- NET-CITY-SA - City of San 
Antonio,US
10 - AS53563   48173  1.1%   48173.0 -- XPLUSONE - X Plus One 
Solutions, Inc.,US
11 - AS33529   42180  0.9%7030.0 -- PEAK-WEB-HOSTING - Peak Web 
Hosting Inc.,US
12 - AS36903   41807  0.9% 102.7 -- MT-MPLS,MA
13 - AS28661   41058  0.9% 651.7 -- HOTLINK INTERNET LTDA,BR
14 - AS730334218  0.8%  36.8 -- Telecom Argentina S.A.,AR
15 - AS840230100  0.7%  44.5 -- CORBINA-AS OJSC Vimpelcom,RU
16 - AS25563   28028  0.6%9342.7 -- WEBLAND-AS Webland AG, 
Autonomous System,CH
17 - AS771326716  0.6%3339.5 -- TELKOMNET-AS-AP PT 
Telekomunikasi Indonesia,ID
18 - AS46230   26596  0.6%1266.5 -- DUDROP - Dignitas Technology 
Inc,US
19 - AS39891   20395  0.5%  10.3 -- ALJAWWALSTC-AS Saudi Telecom 
Company JSC,SA
20 - AS197914   19528  0.4%   19528.0 -- STOCKHO-AS Stockho Hosting 
SARL,FR


TOP 20 Unstable Origin AS (Updates per announced prefix)
Rank ASNUpds %  Upds/PfxAS-Name
 1 - AS22059  111920  2.5%   55960.0 -- APVIO-1 - Apvio, Inc.,US
 2 - AS53563   48173  1.1%   48173.0 -- XPLUSONE - X Plus One 
Solutions, Inc.,US
 3 - AS61894  173372  3.9%   43343.0 -- FreeBSD Brasil LTDA,BR
 4 - AS197914   19528  0.4%   19528.0 -- STOCKHO-AS Stockho Hosting 
SARL,FR
 5 - AS21669   76722  1.7%   19180.5 -- NJ-STATEWIDE-LIBRARY-NETWORK - 
New Jersey State Library,US
 6 - AS181359965  0.2%9965.0 -- BTV BTV Cable television,JP
 7 - AS3935889523  0.2%9523.0 -- MUBEA-FLO - Mubea,US
 8 - AS2015769399  0.2%9399.0 -- TCBANK-AS Tver City Bank, 
Joint Stock Company,RU
 9 - AS25563   28028  0.6%9342.7 -- WEBLAND-AS Webland AG, 
Autonomous System,CH
10 - AS463368960  0.2%8960.0 -- GOODVILLE - Goodville Mutual 
Casualty Company,US
11 - AS1991218008  0.2%8008.0 -- FLEXOPTIX Flexoptix GmbH,DE
12 - AS449517437  0.2%7437.0 -- EFONDS-AS eFonds Solutions AG,DE
13 - AS33529   42180  0.9%7030.0 -- PEAK-WEB-HOSTING - Peak Web 
Hosting Inc.,US
14 - AS606735374  0.1%5374.0 -- ACTIVCOM Activcom Kft,HU
15 - AS612945370  0.1%5370.0 -- STIHLHU-AS Andreas Stihl 
Kereskedelmi Kft,HU
16 - AS61570   1  0.4%4722.0 -- ENTERIW PROVEDOR DE INTERNET 
LTDA,BR
17 - AS203863360  0.1%3360.0 -- MOVE-VAN - Move Sales, Inc.,US
18 - AS771326716  0.6%3339.5 -- TELKOMNET-AS-AP PT 
Telekomunikasi Indonesia,ID
19 - AS23752  261532  5.9%3189.4 -- NPTELECOM-NP-AS Nepal 
Telecommunications Corporation, Internet Services,NP
20 - AS33440   12190  0.3%3047.5 -- WEBRULON-NETWORK - webRulon, 
LLC,US


TOP 20 Unstable Prefixes
Rank Prefix Upds % Origin AS -- AS Name
 1 - 177.10.158.0/24  173355  3.7%   AS61894 -- FreeBSD Brasil LTDA,BR
 2 - 202.70.88.0/21   130756  2.8%   AS23752 -- NPTELECOM-NP-AS Nepal 
Telecommunications Corporation, Internet Services,NP
 3 - 202.70.64.0/21   130078  2.8%   AS23752 -- NPTELECOM-NP-AS Nepal 
Telecommunications Corporation, Internet Services,NP
 4 - 105.96.0.0/22 79375  1.7%   AS36947 -- ALGTEL-AS,DZ
 5 - 209.212.8.0/2476674  1.6%   AS21669 -- NJ-STATEWIDE-LIBRARY-NETWORK - 
New Jersey State Library,US
 6 - 76.191.107.0/24   55992  1.2%   AS22059 -- APVIO-1 - Apvio, Inc.,US
 7 - 64.34.125.0/2455928  1.2%   AS22059 -- APVIO-1 - Apvio, Inc.,US
 8 - 199.38.164.0/23   48173  1.0%   AS53563 -- XPLUSONE - X Plus One 
Solutions, Inc.,US
 9 - 69.194.4.0/24 42167  0.9%   AS33529 -- PEAK-WEB-HOSTING - Peak Web 
Hosting Inc.,US
10 - 118.98.88.0/2426724  0.6%   AS64567 -- -Private Use AS-,ZZ
 AS7713  -- TELKOMNET-AS-AP PT 
Telekomunikasi Indonesia,ID
11 - 130.0.192.0/2119528  0.4%   AS197914 -- STOCKHO-AS Stockho Hosting 
SARL,FR
12 - 177.128.221.0/24  18759  0.4%   AS61570 -- ENTERIW PROVEDOR DE INTERNET 

CFP: IEEE International Conference on Network Protocols (ICNP)

2015-04-10 Thread Srihari Nelakuditi

   Call for Papers

IEEE ICNP 2015
  http://icnp15.cs.ucr.edu/

ICNP, the IEEE International Conference on Network Protocols, is the
premier conference on network protocols, covering all aspects of
network protocol research, including design, analysis, specification,
verification, implementation, and performance. Sponsored by the IEEE,
ICNP 2015 is the 23rd edition of the conference, to be held in San
Francisco, CA, USA from Nov. 10-13, 2015.

==

   Important dates

 Paper SubmissionMay 8, 2015, 7:59 PM EST (FIRM)
 Acceptance Notification June 30, 2015
 Camera Ready VersionAug 15, 2015

==

We invite papers with significant, original research contributions to
the field of network protocols for submission. Topics of interest
include, but are not limited to:

* All aspects of network protocol research including design,
specification, verification, implementation, measurement, testing, and
analysis

* Domain-specific solutions, including protocols for network security,
Internet of Things, routing, user privacy, network management, and
data centers

* Application-layer protocols for peer-to-peer systems, social
networks, and emerging systems

* Contributions to network architecture, e.g., specific algorithms and
protocols for software defined networks, network virtualization, or
future Internet architectures

ICNP 2015 will select an accepted full paper for the best paper award.
Up to two of the best papers from ICNP will be fast-tracked in the
IEEE/ACM Transactions on Networking, with a streamlined journal review
process. Acceptance of fast-tracked papers in ToN is not guaranteed,
but is more likely than a regular submission.

Submission Guidelines

* All papers should adhere to the IEEE Computer conference paper
formatting requirements (IEEEtran.cls) and should not exceed 10 pages
with font size no smaller than 10 pt (details can be found on the
submission guidelines and formatting page).

* ICNP uses a double-blind review process. The identity of authors and
referees will not be revealed to each other. To ensure double-blind
reviewing, author names and affiliations should not appear in the
paper; bibliographic references should be made in such a way as to
preserve author anonymity; acknowledgement with identifiable names and
funding sources should be removed. Note that own work should be cited
as a third person. Papers violating this double-blind review policy
will be rejected without review.

* Authors need to indicate on their paper’s submission page all TPC
members with whom they have conflicts of interest.

* Every paper MUST be presented by an author at the conference. The
author list MUST remain the same as when the paper was submitted for
review, and any changes in the author list or title is forbidden
without prior written permission from the TPC Co-Chairs. At least one
author of an accepted paper is expected to register at the full rate
of the conference and to present the paper at the conference, in order
for the paper to appear in the conference proceedings and be submitted
to the IEEE digital library. Papers not presented by an author at the
conference will not be published in the proceedings or submitted for
inclusion in the IEEE digital library.

Integrity Policy

Submitted papers should not be previously published nor under review
by another conference or journal. In some cases, the ICNP chairs may
share information about submitted papers with other conference chairs
and journal editors to ensure the integrity of papers under
consideration. Authors are prohibited from informing any TPC member of
any identifiable information (such as titles) of their submissions.
Also, papers containing plagiarized material will be subject to the
IEEE plagiarism policy and will be rejected without review.

Organizing Committee

General Co-Chairs:
  Srikanth V. Krishnamurthy, University of California, Riverside
  Prasant Mohapatra, University of California, Davis

TPC Co-Chairs:
  Aditya Akella, University of Wisconsin, Madison
  Vishal Misra, Columbia University

Steering Committee:
  Kevin Almeroth, University of California, Santa Barbara
  Ken Calvert, University of Kentucky
  Sonia Fahmy, Purdue University
  Mohamed Gouda, University of Texas, Austin
  Timothy G. Griffin, University of Cambridge
  Teruo Higashino, Osaka University
  David Lee, HP Labs
  K.K. Ramakrishnan (Chair), University of California, Riverside
  Krishan Sabnani, Bell Laboratories

==