For the transcript I gave we should expect a src_as outside the network
which should not be zero. I agree that dst_as is zero which corresponds to
my AS but the src_as of zero and srcaddr outside my network doesn't seem
acceptable ;(
----- Original Message -----
From: "Christian Hammers" <ch@westend.com>
To: "Mark Manuel C. Ramos" <markmanuel@pacific.net.sg>
Cc: <cflowd@caida.org>
Sent: Monday, February 19, 2001 4:51 PM
Subject: Re: everything ZERO
> On Mon, Feb 19, 2001 at 04:12:01PM +0800, Mark Manuel C. Ramos wrote:
> > I have a lot of the following.... The src_ip and dst_ip seems OK. the
> > dst_ip is indeed inside my network and src_ip is outside. How come my
all
> > my src_as are zero?
> I read it in either the CISCO netflow FAQ or the CAIDA arts/cflow FAQ
> (sorry no URL at the moment). IIRC it meant that the router is unable to
> get the AS for this IP from BGP as it is it's own AS.
> (At least in our src we have a substitute by our own AS number for this
case)
>
> HTH
> bye,
>
> -christian-
>
> --
> codito ergo sum - I code, therefore I am!
>
-- cflowd mailing list cflowd@caida.org
This archive was generated by hypermail 2b29 : Mon Feb 19 2001 - 01:06:00 PST