Re: NetFlow / sFlow / IPFIX network probe proposal

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



* Roman Tsisyk:

> 2. Correctly and fully fill all fields in a packet
> As I pointed above, pcap-based tools can't correctly fill all fields,
> e.g. output interface, nexthop, and AS (but I don't know where get AS
> information in the kernel yet).

(Older) IOS populates those fields from route tags found in the FIB.
Quagga etc. would have to be taught to set these tags.  The advantage
is that no additional route lookups are required (at least when
rp_filter is active).

-- 
Florian Weimer                <fweimer@xxxxxx>
BFK edv-consulting GmbH       http://www.bfk.de/
Kriegsstraße 100              tel: +49-721-96201-1
D-76133 Karlsruhe             fax: +49-721-96201-99
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux