[Nfdump-discuss] nfdump AS filter

SourceForge Headquarters 1320 Columbia Street Suite 310 San Diego, CA 92101 +1 (858) 422-6466

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body bgcolor="#FFFFFF">
Hi guys, 
 
there is some dependency(like whois or something similar) for AS number filter to works? 
 
As in this example, i used ip filter and then as filter based on an facebook ip: 
[root@bns ~]# nfdump -M /data/nfsen/profiles-data/live/7206vxr&nbsp; -T&nbsp; -R 2013/12/09/nfcapd.201312090930:2013/12/09/nfcapd.201312091155 -c 20&nbsp; &quot;dst ip 69.171.242.27&quot; 
Date first seen&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Duration Proto&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Src IP Addr:Port&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Dst IP Addr:Port&nbsp;&nbsp; Packets&nbsp;&nbsp;&nbsp; Bytes Flows 
2013-12-09 09:29:50.709&nbsp;&nbsp;&nbsp;&nbsp; 0.000 TCP&nbsp;&nbsp;&nbsp;&nbsp; 192.168.105.70:45611 -&gt;&nbsp;&nbsp;&nbsp; 69.171.242.27:80&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 41&nbsp;&nbsp;&nbsp;&nbsp; 1 
2013-12-09 09:29:50.753&nbsp;&nbsp;&nbsp;&nbsp; 0.000 TCP&nbsp;&nbsp;&nbsp;&nbsp; 192.168.105.70:45613 -&gt;&nbsp;&nbsp;&nbsp; 69.171.242.27:80&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 41&nbsp;&nbsp;&nbsp;&nbsp; 1 
2013-12-09 09:29:50.761&nbsp;&nbsp;&nbsp;&nbsp; 0.000 TCP&nbsp;&nbsp;&nbsp;&nbsp; 192.168.105.70:45612 -&gt;&nbsp;&nbsp;&nbsp; 69.171.242.27:80&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 41&nbsp;&nbsp;&nbsp;&nbsp; 1 
 
[root@bns ~]# nfdump -M /data/nfsen/profiles-data/live/7206vxr&nbsp; -T&nbsp; -R 2013/12/09/nfcapd.201312090930:2013/12/09/nfcapd.201312091155 -c 20&nbsp; &quot;dst as 32934&quot; 
Date first seen&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Duration Proto&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Src IP Addr:Port&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Dst IP Addr:Port&nbsp;&nbsp; Packets&nbsp;&nbsp;&nbsp; Bytes Flows 
Summary: total flows: 0, total bytes: 0, total packets: 0, avg bps: 0, avg pps: 0, avg bpp: 0 
Time window: 2013-12-09 09:24:59 - 2013-12-09 11:59:57 
Total flows processed: 687120, Blocks skipped: 0, Bytes read: 35734128 
Sys: 0.207s flows/second: 3303985.7&nbsp; Wall: 0.205s flows/second: 3343893.7 
 
 
Regards 
 
<div class="moz-signature">-- 
<div style="font-size:medium">Riccardo Cupardo</div>
<div> 
W&nbsp;&#43;39 02 84278805&nbsp; 
S&nbsp;riccardo.cupardo</div>
<div>E&nbsp;<a href="mailto:ric...@pi...">ric...@pi...</a>*</div>
<div> 
 
via Breda 176, 2nd Floor, Milan, 20126 Italy 
picture the possibilities&nbsp;|&nbsp;piksel.com 
 
<img src="cid:par...@pi..." type="image/png"> 
</div>
</div>
This message is private and confidential. If you have received this message in error, please notify the sender or ser...@pi... and remove it from your system.
Piksel Inc is a company registered in the United States New York City, 1250 Broadway, Suite 1902, New York, NY 10001. F No. = 2931986
</body>
</html>

[Nfdump-discuss] nfdump AS filter

netflow collecting and processing tools

[Nfdump-discuss] nfdump AS filter