nanog mailing list archives

Re: Open source Netflow analysis for monitoring AS-to-AS traffic


From: Saku Ytti <saku () ytti fi>
Date: Thu, 28 Mar 2024 19:48:45 +0200

Hey,

On Thu, 28 Mar 2024 at 17:49, Peter Phaal <peter.phaal () gmail com> wrote:

sFlow was mentioned because I believe Brian's routers support the feature and may well export the as-path data 
directly via sFlow (I am not aware that it is a feature widely supported in vendor NetFlow/IPFIX implementations?).

Exporting AS information is wire-format agnostic feature, if it's
supported or not, it can equally be injected into sFlow, NetflowV5
(src and dst only), NetflowV9 and IPFIX. The cost is that you need to
program in FIB entries the information, so that the information
becomes available at look-up time for record creation.

In OP's case (IOS-XR) this means enabling 'attribute-download' for
BGP, and I believe IOS-XR will never download any other asn but src
and dst, therefore full information cannot be injected into any
emitted wire-format.
-- 
  ++ytti


Current thread: