nanog mailing list archives

Re: Alternative to NetFlow for Measuring Traffic flows


From: Richard A Steenbergen <ras () e-gerbil net>
Date: Mon, 16 Dec 2002 22:28:38 -0500


On Mon, Dec 16, 2002 at 09:16:55PM -0500, K. Scott Bethke wrote:

based on ALL the ASN's of the people on the peering switch..  but in most
cases anyone pushing any real traffic will probably not have fine grained
samples enough to determine a peering relationship based on a  single AS
with this method.  Maybe Im wrong but hey if you are taking 200megs from any
one ASN I would hope you knew about it.

Also, that method has the same "knowing the routes" problem as netflow. 
Whereever you are getting your list of ASN's route ASN.*"'s routes, there 
is pretty much no way they are accurate (for an ASN of ANY size).

You would have to statically route (or otherwise inject routes with a
specific nexthop) a list of their customer prefixes that would have to be
manually transmitted.

-- 
Richard A Steenbergen <ras () e-gerbil net>       http://www.e-gerbil.net/ras
GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC)


Current thread: