Re: [Nfdump-discuss] nfdump AS filter

[Riccardo Cupardo]

Perfect, That was very clear, Brian. Regards On 12/09/2013 01:34 PM, Brian Candler wrote: On 09/12/2013 12:08, Riccardo Cupardo wrote: there is some dependency(like whois or something similar) for AS number filter to works? The router which is generating the Netflow records needs a full BGP feed, and it needs to be configured to include AS number information in the Netflow packets it sends. (Cisco: " ip flow-export version 5 [origin-as|peer-as]") nfdump just records the AS information which the router sent. AFAIK it can't map IP to origin AS in any third-party database. Note: in any case, you may configure your router to include the peer AS (i.e. which AS you learned the route from) rather than the origin AS. That's not something that an IP lookup database would be able to give you. -- Riccardo Cupardo W +39 02 84278805  S riccardo.cupardo E riccardo.cupa...@piksel.com* via Breda 176, 2nd Floor, Milan, 20126 Italy picture the possibilities | piksel.com

------------------------------------------------------------------------------
Sponsored by Intel(R) XDK 
Develop, test and display web and hybrid apps with a single code base.
Download it for free now!
http://pubads.g.doubleclick.net/gampad/clk?id=111408631&iu=/4140/ostg.clktrk
_______________________________________________
Nfdump-discuss mailing list
Nfdump-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfdump-discuss