[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ntop
Subject:    [Ntop] Inserting a list of networks/ASNs for unknown AS numbers
From:       Daniel Gomez <dgabad () gmail ! com>
Date:       2014-01-09 13:14:19
Message-ID: CAGsoo_zMkNGJH6WMLtaMPpxm3gwwpatHu7WsrPveVHwTymbTqg () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


Hi,

I realize that a ~10% of host do not show AS Number information. Pmacct
allows to use a file containing a list of tuples (src_net, src_as) and
correlates the list with the flow information, in order to match the
"unknown hosts".

That would be the equivalent of having a full BGP table router exporting
flows to nProbe, but on a cheap way.

Such a table can be daily extracted from here :
http://www.ripe.net/data-tools/stats/ris/ris-raw-data, and it is a good
complement for the geolocation.

Is there any way, nowadays, to configure that in ntopng?

Thanks

Daniel

[Attachment #5 (text/html)]

<div dir="ltr"><div><div>Hi,<br><br></div>I realize that a ~10% of host do not show \
AS Number information. Pmacct allows to use a file containing a list of tuples \
(src_net, src_as) and correlates the list with the flow information, in order to \
match the &quot;unknown hosts&quot;. <br>

<br></div>That would be the equivalent of having a full BGP table router exporting \
flows to nProbe, but on a cheap way. <br><div><div><div><div><div><div><br>Such a \
table can be daily extracted from here : <a \
href="http://www.ripe.net/data-tools/stats/ris/ris-raw-data">http://www.ripe.net/data-tools/stats/ris/ris-raw-data</a>, \
and it is a good complement for the geolocation.<br>

</div><div><br></div><div>Is there any way, nowadays, to configure that in \
ntopng?<br><br></div><div>Thanks<br><br>Daniel<br></div><div><br \
clear="all"><br><br><br> </div></div></div></div></div></div></div>



_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop


[prev in list] [next in list] [prev in thread] [next in thread]