[Nfsen-discuss] exporting as fields.

[Leandro R. <ing...@gm...>]

Hi guys, Im trying to export asn field from my huawei router to my nfsen
platform.
I already have a mikrotik => nfsen pair and can not see the asn field
either.
In both cases when I look into raw data i can see:

Flow Record:
  Flags        =              0x86 NETFLOW v9, Sampled
  label        =            <none>
  export sysid =                 1
  size         =               100
  first        =        1633007931 [2021-09-30 10:18:51]
  last         =        1633007936 [2021-09-30 10:18:56]
  msec_first   =                 0
  msec_last    =                 0
  src addr     =    74.125.107.167
  dst addr     =    168.227.99.197
  src port     =               443
  dst port     =             58226
  fwd status   =                 0
  tcp flags    =              0x10 ...A....
  biFlow Dir   =              0x00 arbitrary
  end reason   =              0x00
  proto        =                 6 TCP
  (src)tos     =                 0
  (in)packets  =              3000
  (in)bytes    =           3148000
  input        =               116
  output       =               102

*  src as       =                 0  dst as       =                 0*
  src mask     =                16 74.125.0.0/16
  dst mask     =                24 168.227.99.0/24
  dst tos      =                 0
  direction    =                 0
  ip next hop  =        10.40.95.2
  bgp next hop =        10.65.12.2
  src vlan     =                 0
  dst vlan     =              4011
  ip router    =       10.40.1.252
  engine type  =                 0
  engine ID    =                 0
  received at  =     1633008000986 [2021-09-30 10:20:00.986]

Does anyone succed adding dst / src as fields ?
If so ... can you share your config ? (no mather wich router/model/brand).
Thanks
Leandro.




<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail>
Libre
de virus. www.avast.com
<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail>
<#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>