[Nfdump-discuss] nfdump and 32bit ASNs with Cisco FNF /w user template
netflow collecting and processing tools
Brought to you by:
phaag
|
From: Spiros P. <pa...@no...> - 2014-12-30 15:49:31
|
Hi all,
I'm trying to produce an AS matrix with nfdump/nfsen and I'm using the
following config on Cisco ASR1002 (03.10.02.S.153-3.S2) for FNF v9:
flow record flr-4:
Description: User defined
No. of users: 1
Total field space: 33 bytes
Fields:
match routing source as peer 4-octet
match routing destination as peer 4-octet
match interface input
match interface output
match flow direction
collect counter bytes
collect counter packets
collect timestamp sys-uptime first
collect timestamp sys-uptime last
which is based on the predefined record "netflow ipv4 as peer" but with
4byte ASNs.
While nfcapd collects the packets, nfdump doesn't seem to be able to
understand the format and doesn't show anything.
Anyone can help me on this? Am I doing something wrong?
Thanx,
Spiros
|