[132098] in North American Network Operators' Group
Re: flow analysis for juniper devices
daemon@ATHENA.MIT.EDU (Paolo Lucente)
Sun Nov 14 10:12:52 2010
Date: Sun, 14 Nov 2010 15:12:23 +0000
From: Paolo Lucente <pl+list@pmacct.net>
To: Jared Mauch <jared@puck.nether.net>
In-Reply-To: <FFAF7651-82F5-4C76-BB37-46DE2B80E5C5@puck.nether.net>
Cc: Mehmet Akcin <mehmet@akcin.net>, nanog@nanog.org
Reply-To: Paolo Lucente <pl+list@pmacct.net>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Sun, Nov 14, 2010 at 09:04:36AM -0500, Jared Mauch wrote:
>
> On Nov 14, 2010, at 3:59 AM, Paolo Lucente wrote:
>
> > OTOH it would be nice to see one day those NetFlow v9 MAC address fields
> > populated on higher-grade boxes, say, to facilitate analysis of public
> > peering at internet exchanges ...
>
> This can be done with mac accounting in your platform. It may require ordering the right PIC in this case, but is easy to collect that data.
MAC accounting is not a solution, except for basic things, for at
least two reasons: 1) it is coarse-grained and 2) its segregation
from flow accounting prevents having all the eggs in one basket.
Cheers,
Paolo
