ПРОЕКТЫ 


  АРХИВ 


Apache-Talk @lexa.ru 

Inet-Admins @info.east.ru 

Filmscanners @halftone.co.uk 

Security-alerts @yandex-team.ru 

nginx-ru @sysoev.ru 

  СТАТЬИ 


  ПЕРСОНАЛЬНОЕ 


  ПРОГРАММЫ 



ПИШИТЕ
ПИСЬМА












     АРХИВ :: Inet-Admins
Inet-Admins mailing list archive (inet-admins@info.east.ru)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[inet-admins] NetFlow, AS0, Ответ. :)


  • To: inet-admins@info.east.ru
  • Subject: [inet-admins] NetFlow, AS0, Ответ. :)
  • From: Dmitri Kalintsev <dek@hades.uz>
  • Date: Fri, 19 May 2000 09:45:22 +0200
  • Content-Disposition: inline
  • Mail-Followup-To: inet-admins@info.east.ru
  • User-Agent: Mutt/1.2i

Я прокосел. :) FAQ был не на NetFlow, а на cflowd. ;) Вот ответ целиком:

From: Markus Hofmann <markus@uta.at>
To: cisco-nsp@puck.nether.net
Subject: Re: [nsp] ASN 0?

Hank,

somewhere in the cflowd FAQ i found the following statement:


What causes entries in the AS matrix to have the source or
destination AS set to zero?

* Flows for traffic destined for the router's local AS will have a
  destination AS of 0.  Flows for traffic coming from the router's
  local AS will have a source AS of 0.

* Flows for traffic destined for the router will have a destination
  AS of 0 and a destination interface index of 0.

* Flows for unroutable traffic will have a destination AS of 0, a
    nexthop of 0.0.0.0, an output interface index of 0 and a destination
    netmask length of 0.

* Prefix cache misses when not running CEF.  This can cause failed
  AS and netmask lookups on both the source and destination.  Flows for
  this traffic will have a source AS of 0 and a source netmask length of 0
  and/or a destination AS of 0 and destination netmask length of 0.  In
  the case of a source AS of 0 and netmask length of 0, the typical cause
  is asymmetric traffic (the router is only seeing one direction of the
  flow because traffic in the other direction takes a different path which
  circumvents the router or the flow is unidrectional).

* Flows for multicast traffic appear to always have both source and
  destination AS set to 0.


++mh

On Wed, May 10, 2000 at 09:13:35AM +0200, Hank Nussbacher wrote:
> What is ASN 0?  Some cflowd traffic from yesterday:
> 
>   Src AS  Dst AS           Pkts       Pkts/sec          Bytes       Bits/sec
>    11537     378       42529428        492.227    39267601825     3.6358e+06
>      293     378         747599        8.65257      852446110        78928.4
>        0     378         133498        1.54508      133724838        12381.6
>      378   11537          62234       0.720284       89086262        8248.54
>     8933       0          15658       0.181223        9935006        919.887
>    11537       0           5989      0.0693155        5192298        480.757
>      378       0          10620       0.122914        1332763        123.401
>     9010     378           2096      0.0242587         785149        72.6973
>     7911     378            729      0.0084373         764389        70.7751
>      297       0            767     0.00887711         497797        46.0912
>    10764       0              6    6.94428e-05           2772       0.256661
>   
> Cisco doesn't allow ASN 0:
> 
> TAU-gp2(config-router)#neigh 10.1.1.1 remote-as 0
>                                                 ^
> % Invalid input detected at '^' marker.
> 
> Does Juniper perhaps allow ASN 0? Any other ideas?
> 
> -Hank

-- 
Markus Hofmann / UTA Telekom AG / tel: +43 1 9009-3750 / fax: +43 1 9009-93750

Надеюсь, это вам помогло. :)

;)
-- 
   CCNP,CCDP (R&S)                                   Dmitri E. Kalintsev
   CDPlayer@irc            Senior network engineer at NetActive Internet
   dek @ hades.uz                phone: +27 (0)11 719-0333 fax: 444-8900
   http://hades.uz                 UIN:7150410  cell  +27 (0)82-336-1033
=============================================================================
"inet-admins" Internet access mailing list. Maintained by East Connection ISP.
Mail "unsubscribe inet-admins" to Majordomo@info.east.ru if you want to quit.
Archive is accessible on http://info.east.ru/rus/inetadm.html



 




Copyright © Lexa Software, 1996-2009.