cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
155
Views
0
Helpful
0
Replies
asepiacci
Beginner

Netflow Source and Destination AS

Hi,

I've configured Flexible Netflow on a Cisco ASR 1000, IOS XE Version 15.3(3)S2 to keep trace of the Source and Destination AS numbers of the traffic going to and coming from the Internet.

This is an example of what I get with the command "show flow monitor Flow-Monitor cache format record" that shows the content of the Netflow local cache:

IP SOURCE AS:       34618
IP DESTINATION AS:  0
INTERFACE INPUT:    Gi0/0/1.907
INTERFACE OUTPUT:   Gi0/0/1.901
FLOW DIRECTION:     Input
counter bytes:      80
counter packets:    2
timestamp first:    12:07:22.820
timestamp last:     12:07:22.852

IP SOURCE AS:       6739
IP DESTINATION AS:  21469
INTERFACE INPUT:    Gi0/0/0.909
INTERFACE OUTPUT:   Gi0/0/0.950
FLOW DIRECTION:     Input
counter bytes:      62
counter packets:    1
timestamp first:    12:07:15.557
timestamp last:     12:07:15.557

IP SOURCE AS:       0
IP DESTINATION AS:  20746
INTERFACE INPUT:    Gi0/0/1.901
INTERFACE OUTPUT:   Gi0/0/1.907
FLOW DIRECTION:     Output
counter bytes:      61890610
counter packets:    62462
timestamp first:    11:59:01.573
timestamp last:     12:07:26.724

 

Most of the flows show IP SOURCE AS = 0 or IP DESTINATION AS = 0: what does it mean?

 

Thanks.

Alessandro

 

 

 

 

0 REPLIES 0