Hi,
I've configured Flexible Netflow on a Cisco ASR 1000, IOS XE Version 15.3(3)S2 to keep trace of the Source and Destination AS numbers of the traffic going to and coming from the Internet.
This is an example of what I get with the command "show flow monitor Flow-Monitor cache format record" that shows the content of the Netflow local cache:
IP SOURCE AS: 34618
IP DESTINATION AS: 0
INTERFACE INPUT: Gi0/0/1.907
INTERFACE OUTPUT: Gi0/0/1.901
FLOW DIRECTION: Input
counter bytes: 80
counter packets: 2
timestamp first: 12:07:22.820
timestamp last: 12:07:22.852
IP SOURCE AS: 6739
IP DESTINATION AS: 21469
INTERFACE INPUT: Gi0/0/0.909
INTERFACE OUTPUT: Gi0/0/0.950
FLOW DIRECTION: Input
counter bytes: 62
counter packets: 1
timestamp first: 12:07:15.557
timestamp last: 12:07:15.557
IP SOURCE AS: 0
IP DESTINATION AS: 20746
INTERFACE INPUT: Gi0/0/1.901
INTERFACE OUTPUT: Gi0/0/1.907
FLOW DIRECTION: Output
counter bytes: 61890610
counter packets: 62462
timestamp first: 11:59:01.573
timestamp last: 12:07:26.724
Most of the flows show IP SOURCE AS = 0 or IP DESTINATION AS = 0: what does it mean?
Thanks.
Alessandro
