Mailing List Archive

nprobe bgp plug-in with IPFIX/NetFlow 9
Hello,

I’m curious about what info the BGP plugin for nprobe provide they isn’t already available with the src/dst as from an IPFIX/NetFlow 9 flow. Is there extra functionality, or is it only useful if you’re receiving flows in nprobe that do not contain AS info?

Thanks!
_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop
Re: nprobe bgp plug-in with IPFIX/NetFlow 9 [ In reply to ]
It provides the first 10 ASes in the path, for both the client and the server of the flow.

Plugin BGP Update Listener templates:
[NFv9 57762][IPFIX 35632.290][Len 4] %SRC_AS_PATH_1 Src AS path position 1
[NFv9 57763][IPFIX 35632.291][Len 4] %SRC_AS_PATH_2 Src AS path position 2
[NFv9 57764][IPFIX 35632.292][Len 4] %SRC_AS_PATH_3 Src AS path position 3
[NFv9 57765][IPFIX 35632.293][Len 4] %SRC_AS_PATH_4 Src AS path position 4
[NFv9 57766][IPFIX 35632.294][Len 4] %SRC_AS_PATH_5 Src AS path position 5
[NFv9 57767][IPFIX 35632.295][Len 4] %SRC_AS_PATH_6 Src AS path position 6
[NFv9 57768][IPFIX 35632.296][Len 4] %SRC_AS_PATH_7 Src AS path position 7
[NFv9 57769][IPFIX 35632.297][Len 4] %SRC_AS_PATH_8 Src AS path position 8
[NFv9 57770][IPFIX 35632.298][Len 4] %SRC_AS_PATH_9 Src AS path position 9
[NFv9 57771][IPFIX 35632.299][Len 4] %SRC_AS_PATH_10 Src AS path position 10
[NFv9 57772][IPFIX 35632.300][Len 4] %DST_AS_PATH_1 Dest AS path position 1
[NFv9 57773][IPFIX 35632.301][Len 4] %DST_AS_PATH_2 Dest AS path position 2
[NFv9 57774][IPFIX 35632.302][Len 4] %DST_AS_PATH_3 Dest AS path position 3
[NFv9 57775][IPFIX 35632.303][Len 4] %DST_AS_PATH_4 Dest AS path position 4
[NFv9 57776][IPFIX 35632.304][Len 4] %DST_AS_PATH_5 Dest AS path position 5
[NFv9 57777][IPFIX 35632.305][Len 4] %DST_AS_PATH_6 Dest AS path position 6
[NFv9 57778][IPFIX 35632.306][Len 4] %DST_AS_PATH_7 Dest AS path position 7
[NFv9 57779][IPFIX 35632.307][Len 4] %DST_AS_PATH_8 Dest AS path position 8
[NFv9 57780][IPFIX 35632.308][Len 4] %DST_AS_PATH_9 Dest AS path position 9
[NFv9 57781][IPFIX 35632.309][Len 4] %DST_AS_PATH_10 Dest AS path position 10

> On 18 Feb 2019, at 23:34, Jason Lixfeld <jason-ntop@lixfeld.ca> wrote:
>
> Hello,
>
> I’m curious about what info the BGP plugin for nprobe provide they isn’t already available with the src/dst as from an IPFIX/NetFlow 9 flow. Is there extra functionality, or is it only useful if you’re receiving flows in nprobe that do not contain AS info?
>
> Thanks!
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop

_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop
Re: nprobe bgp plug-in with IPFIX/NetFlow 9 [ In reply to ]
It provides the first 10 ASes in the path, for both the client and the server of the flow.

Plugin BGP Update Listener templates:
[NFv9 57762][IPFIX 35632.290][Len 4] %SRC_AS_PATH_1 Src AS path position 1
[NFv9 57763][IPFIX 35632.291][Len 4] %SRC_AS_PATH_2 Src AS path position 2
[NFv9 57764][IPFIX 35632.292][Len 4] %SRC_AS_PATH_3 Src AS path position 3
[NFv9 57765][IPFIX 35632.293][Len 4] %SRC_AS_PATH_4 Src AS path position 4
[NFv9 57766][IPFIX 35632.294][Len 4] %SRC_AS_PATH_5 Src AS path position 5
[NFv9 57767][IPFIX 35632.295][Len 4] %SRC_AS_PATH_6 Src AS path position 6
[NFv9 57768][IPFIX 35632.296][Len 4] %SRC_AS_PATH_7 Src AS path position 7
[NFv9 57769][IPFIX 35632.297][Len 4] %SRC_AS_PATH_8 Src AS path position 8
[NFv9 57770][IPFIX 35632.298][Len 4] %SRC_AS_PATH_9 Src AS path position 9
[NFv9 57771][IPFIX 35632.299][Len 4] %SRC_AS_PATH_10 Src AS path position 10
[NFv9 57772][IPFIX 35632.300][Len 4] %DST_AS_PATH_1 Dest AS path position 1
[NFv9 57773][IPFIX 35632.301][Len 4] %DST_AS_PATH_2 Dest AS path position 2
[NFv9 57774][IPFIX 35632.302][Len 4] %DST_AS_PATH_3 Dest AS path position 3
[NFv9 57775][IPFIX 35632.303][Len 4] %DST_AS_PATH_4 Dest AS path position 4
[NFv9 57776][IPFIX 35632.304][Len 4] %DST_AS_PATH_5 Dest AS path position 5
[NFv9 57777][IPFIX 35632.305][Len 4] %DST_AS_PATH_6 Dest AS path position 6
[NFv9 57778][IPFIX 35632.306][Len 4] %DST_AS_PATH_7 Dest AS path position 7
[NFv9 57779][IPFIX 35632.307][Len 4] %DST_AS_PATH_8 Dest AS path position 8
[NFv9 57780][IPFIX 35632.308][Len 4] %DST_AS_PATH_9 Dest AS path position 9
[NFv9 57781][IPFIX 35632.309][Len 4] %DST_AS_PATH_10 Dest AS path position 10

> On 18 Feb 2019, at 23:34, Jason Lixfeld <jason-ntop@lixfeld.ca> wrote:
>
> Hello,
>
> I’m curious about what info the BGP plugin for nprobe provide they isn’t already available with the src/dst as from an IPFIX/NetFlow 9 flow. Is there extra functionality, or is it only useful if you’re receiving flows in nprobe that do not contain AS info?
>
> Thanks!
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop

_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop