Re: [Nfdump-discuss] nfdump and 32bit ASNs with Cisco FNF /w user template

[Peter H. <ph...@us...>]

Spiros Papageorgiou wrote:
> Hi all,
> 
> I'm trying to produce an AS matrix with nfdump/nfsen and I'm using the 
> following config on Cisco ASR1002 (03.10.02.S.153-3.S2) for FNF v9:
> flow record flr-4:
>    Description:        User defined
>    No. of users:       1
>    Total field space:  33 bytes
>    Fields:
>      match routing source as peer 4-octet
>      match routing destination as peer 4-octet
>      match interface input
>      match interface output
>      match flow direction
>      collect counter bytes
>      collect counter packets
>      collect timestamp sys-uptime first
>      collect timestamp sys-uptime last
> 
> which is based on the predefined record "netflow ipv4 as peer" but with 
> 4byte ASNs.
> 
> While nfcapd collects the packets, nfdump doesn't seem to be able to 
> understand the format and doesn't show anything.
> 
> Anyone can help me on this? Am I doing something wrong?

Well - if packets are written to the file, then nfdump understands it,
otherwise they are discarded. 32bit ASes are supported already for a
long time, so I can not imaging what went wrong. It maybe best, you
collect some traffice to the collector and send it to me.

	- Peter

> 
> Thanx,
> Spiros
> 
> 
> 
> ------------------------------------------------------------------------------
> Dive into the World of Parallel Programming! The Go Parallel Website,
> sponsored by Intel and developed in partnership with Slashdot Media, is your
> hub for all things parallel software development, from weekly thought
> leadership blogs to news, videos, case studies, tutorials and more. Take a
> look and join the conversation now. http://goparallel.sourceforge.net
> _______________________________________________
> Nfdump-discuss mailing list
> Nfd...@li...
> https://lists.sourceforge.net/lists/listinfo/nfdump-discuss


-- 
Peter Haag