Я прокосел. :) FAQ был не на NetFlow, а на cflowd. ;) Вот ответ целиком:
From: Markus Hofmann <markus@uta.at>
To: cisco-nsp@puck.nether.net
Subject: Re: [nsp] ASN 0?
Hank,
somewhere in the cflowd FAQ i found the following statement:
What causes entries in the AS matrix to have the source or
destination AS set to zero?
* Flows for traffic destined for the router's local AS will have a
destination AS of 0. Flows for traffic coming from the router's
local AS will have a source AS of 0.
* Flows for traffic destined for the router will have a destination
AS of 0 and a destination interface index of 0.
* Flows for unroutable traffic will have a destination AS of 0, a
nexthop of 0.0.0.0, an output interface index of 0 and a destination
netmask length of 0.
* Prefix cache misses when not running CEF. This can cause failed
AS and netmask lookups on both the source and destination. Flows for
this traffic will have a source AS of 0 and a source netmask length of 0
and/or a destination AS of 0 and destination netmask length of 0. In
the case of a source AS of 0 and netmask length of 0, the typical cause
is asymmetric traffic (the router is only seeing one direction of the
flow because traffic in the other direction takes a different path which
circumvents the router or the flow is unidrectional).
* Flows for multicast traffic appear to always have both source and
destination AS set to 0.
++mh
On Wed, May 10, 2000 at 09:13:35AM +0200, Hank Nussbacher wrote:
> What is ASN 0? Some cflowd traffic from yesterday:
>
> Src AS Dst AS Pkts Pkts/sec Bytes Bits/sec
> 11537 378 42529428 492.227 39267601825 3.6358e+06
> 293 378 747599 8.65257 852446110 78928.4
> 0 378 133498 1.54508 133724838 12381.6
> 378 11537 62234 0.720284 89086262 8248.54
> 8933 0 15658 0.181223 9935006 919.887
> 11537 0 5989 0.0693155 5192298 480.757
> 378 0 10620 0.122914 1332763 123.401
> 9010 378 2096 0.0242587 785149 72.6973
> 7911 378 729 0.0084373 764389 70.7751
> 297 0 767 0.00887711 497797 46.0912
> 10764 0 6 6.94428e-05 2772 0.256661
>
> Cisco doesn't allow ASN 0:
>
> TAU-gp2(config-router)#neigh 10.1.1.1 remote-as 0
> ^
> % Invalid input detected at '^' marker.
>
> Does Juniper perhaps allow ASN 0? Any other ideas?
>
> -Hank
--
Markus Hofmann / UTA Telekom AG / tel: +43 1 9009-3750 / fax: +43 1 9009-93750
Надеюсь, это вам помогло. :)
;)
--
CCNP,CCDP (R&S) Dmitri E. Kalintsev
CDPlayer@irc Senior network engineer at NetActive Internet
dek @ hades.uz phone: +27 (0)11 719-0333 fax: 444-8900
UIN:7150410 cell +27 (0)82-336-1033
=============================================================================
"inet-admins" Internet access mailing list. Maintained by East Connection ISP.
Mail "unsubscribe inet-admins" to Majordomo@info.east.ru if you want to quit.
Archive is accessible on
