Re: Netflow RouterSrcPrefix aggregation scheme and src_as field.

cisco · ‎07-23-2003

Hi.

I am gathering network traffic stats using RouterSrcPrefix aggregation scheme definition of netflow. Our billing system needs this aggregation scheme. I see in output file of netflow collector v4:

- -

0.0.0.0|0|1|0|84|9208|40|731207962|731208237|138936

- -

The "src_as" field are "0". Do how I set "src_as" for different clients networks? These networks don't use BGP.

My config for 3640 system:

....

ip flow-export source FastEthernet0

ip flow-export version 5

ip flow-export destination 70.79.141.231 9994

ip flow-aggregation cache source-prefix

cache timeout inactive 10

cache timeout active 1

export destination 70.79.141.231 9996

enabled

Thanks!

Report Inappropriate Content · ‎07-29-2003

I think it works only with BGP.

chatasos · ‎12-12-2003

I'm having exactly the same problem.

Whenever i use flow-aggregation (prefix) i can't see other AS's networks. All i see is 0.0.0.0. If i use flow aggragation (source/dest) i can't even see the other AS's networks; only mine.

e.x.

sh ip cache flow aggregation prefix

Gi0/1 0.0.0.0 /0 Vi249 213.16.x.x /32 4 7

Vi550 212.251.x.x/32 Gi0/1 0.0.0.0 /0 6 28

Gi0/1 0.0.0.0 /0 Vi43 213.16.x.x /32 1 2

Vi335 212.251.x.x /32 Gi0/1 0.0.0.0 /0 353 3234

Gi0/1 0.0.0.0 /0 Vi79 213.16.x.x /32 1971 8978

Vi722 213.16.x.x /32 Gi0/1 194.63.x.x /23 2 236

Gi0/1 0.0.0.0 /0 Vi85 212.251.x.x/32 10 292

Gi0/1 0.0.0.0 /0 Vi294 213.16.x.x /32 51 411

Vi380 193.92.x.x /32 Gi0/1 0.0.0.0 /0 7 574

x.x.x.x are my networks (they belong to my AS) but all the others 0.0.0.0 are refering to other AS's networks.

chatasos · ‎12-12-2003

After enabling "minimum mask" i managed to get all the stats right.

e.x.

ip flow-aggregation cache prefix

mask source minimum 24

mask destination minimum 24

http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121newft/121t/121t2/dtnfmask.htm