[54203] in North American Network Operators' Group
Re: Alternative to NetFlow for Measuring Traffic flows
daemon@ATHENA.MIT.EDU (Richard A Steenbergen)
Mon Dec 16 22:29:10 2002
Date: Mon, 16 Dec 2002 22:28:38 -0500
From: Richard A Steenbergen <ras@e-gerbil.net>
To: "K. Scott Bethke" <kbethke@thruport.com>
Cc: nanog@merit.edu
In-Reply-To: <048c01c2a572$5fc13eb0$9b09c741@gooportojsdu8d>
Errors-To: owner-nanog-outgoing@merit.edu
On Mon, Dec 16, 2002 at 09:16:55PM -0500, K. Scott Bethke wrote:
>
> based on ALL the ASN's of the people on the peering switch.. but in most
> cases anyone pushing any real traffic will probably not have fine grained
> samples enough to determine a peering relationship based on a single AS
> with this method. Maybe Im wrong but hey if you are taking 200megs from any
> one ASN I would hope you knew about it.
Also, that method has the same "knowing the routes" problem as netflow.
Whereever you are getting your list of ASN's route ASN.*"'s routes, there
is pretty much no way they are accurate (for an ASN of ANY size).
You would have to statically route (or otherwise inject routes with a
specific nexthop) a list of their customer prefixes that would have to be
manually transmitted.
--
Richard A Steenbergen <ras@e-gerbil.net> http://www.e-gerbil.net/ras
GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC)
