> We know the GPS coordinates for each BGP next-hop in the network, and > traffic is sampled on ingress at the edge of the network and reported > to pmacct (*flow), which also receives a RR-style BGP feed for > correlation. > > We can know where (geographically) a packet enters the network, where > it leaves the network and to what address family it belongs.
i have only seen pmacct used for aggregated flow/traffic. you actually know where each packet enters and leaves? randy
