Re: everything ZERO

From: Mark Manuel C. Ramos (markmanuel@pacific.net.sg)
Date: Mon Feb 19 2001 - 00:58:38 PST

  • Next message: Christian Hammers: "Re: everything ZERO"

    For the transcript I gave we should expect a src_as outside the network
    which should not be zero. I agree that dst_as is zero which corresponds to
    my AS but the src_as of zero and srcaddr outside my network doesn't seem
    acceptable ;(

    ----- Original Message -----
    From: "Christian Hammers" <ch@westend.com>
    To: "Mark Manuel C. Ramos" <markmanuel@pacific.net.sg>
    Cc: <cflowd@caida.org>
    Sent: Monday, February 19, 2001 4:51 PM
    Subject: Re: everything ZERO

    > On Mon, Feb 19, 2001 at 04:12:01PM +0800, Mark Manuel C. Ramos wrote:
    > > I have a lot of the following.... The src_ip and dst_ip seems OK. the
    > > dst_ip is indeed inside my network and src_ip is outside. How come my
    all
    > > my src_as are zero?
    > I read it in either the CISCO netflow FAQ or the CAIDA arts/cflow FAQ
    > (sorry no URL at the moment). IIRC it meant that the router is unable to
    > get the AS for this IP from BGP as it is it's own AS.
    > (At least in our src we have a substitute by our own AS number for this
    case)
    >
    > HTH
    > bye,
    >
    > -christian-
    >
    > --
    > codito ergo sum - I code, therefore I am!
    >

    --
    cflowd mailing list
    cflowd@caida.org
    



    This archive was generated by hypermail 2b29 : Mon Feb 19 2001 - 01:06:00 PST