Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Netflow Source and Destination AS

Hi,

I've configured Flexible Netflow on a Cisco ASR 1000, IOS XE Version 15.3(3)S2 to keep trace of the Source and Destination AS numbers of the traffic going to and coming from the Internet.

This is an example of what I get with the command "show flow monitor Flow-Monitor cache format record" that shows the content of the Netflow local cache:

IP SOURCE AS:       34618
IP DESTINATION AS:  0
INTERFACE INPUT:    Gi0/0/1.907
INTERFACE OUTPUT:   Gi0/0/1.901
FLOW DIRECTION:     Input
counter bytes:      80
counter packets:    2
timestamp first:    12:07:22.820
timestamp last:     12:07:22.852

IP SOURCE AS:       6739
IP DESTINATION AS:  21469
INTERFACE INPUT:    Gi0/0/0.909
INTERFACE OUTPUT:   Gi0/0/0.950
FLOW DIRECTION:     Input
counter bytes:      62
counter packets:    1
timestamp first:    12:07:15.557
timestamp last:     12:07:15.557

IP SOURCE AS:       0
IP DESTINATION AS:  20746
INTERFACE INPUT:    Gi0/0/1.901
INTERFACE OUTPUT:   Gi0/0/1.907
FLOW DIRECTION:     Output
counter bytes:      61890610
counter packets:    62462
timestamp first:    11:59:01.573
timestamp last:     12:07:26.724

 

Most of the flows show IP SOURCE AS = 0 or IP DESTINATION AS = 0: what does it mean?

 

Thanks.

Alessandro

 

 

 

 

Everyone's tags (1)
50
Views
0
Helpful
0
Replies
CreatePlease login to create content