SFlow and BGP

  • 0
  • 1
  • Question
  • Updated 2 years ago
  • Answered
Hi, all!

Is sFlow transmit BGP/AS attribute?
From which EXOS version?

Our Customer using EXOS 12.6 and they telling that switch transmit only information about IP, but not AS.

Thank you!  
Photo of Alexandr P

Alexandr P, Embassador

  • 12,042 Points 10k badge 2x thumb

Posted 2 years ago

  • 0
  • 1
Photo of EtherMAN

EtherMAN, Embassador

  • 6,456 Points 5k badge 2x thumb
just looked at a few of my upstream carrier ten gig ports and they seem to be right no AS info ... I am running 15.4 and have looked at 8900 interfaces and a 670 interface... All other information is there but AS ... I use Solarwinds NTA to collect and analyze Sflow and Netflow data ... I wonder if it has to do with whither you are just a layer transit switch or an interface off a BGP router... We do not use any Extreme for routing and have Juniper MX's for that which do have BGP info when I look at flows from them 
Photo of Alexandr P

Alexandr P, Embassador

  • 12,042 Points 10k badge 2x thumb
Any more ideas?
Photo of EtherMAN

EtherMAN, Embassador

  • 6,456 Points 5k badge 2x thumb
My theory may be right if you are only pulling sflow from a non-bgp-routing switch as we are... Looking at sflow packet information it seems AS and route information is part of extended sampling from a router http://www.sflow.org/SFLOW-DATAGRAM.txt ...  
Photo of Jarek

Jarek

  • 2,398 Points 2k badge 2x thumb
SFlow on Extreme is very simple and I think limited.
Have you try ip-fix ? ( it is less limited :) )

--
Jarek
Photo of Alexandr P

Alexandr P, Embassador

  • 12,042 Points 10k badge 2x thumb
Hello, all!

FYI

following limitations are present in the ExtremeXOS implementation:
• Generic port statistics are reported to the sFlow collector.
• Non-extended data.
• Only port-based sampling.
• There is no MIB support.

so, no extended data
It all depends of source AS and destination AS is extended data 

Open feature request - FR case #01182686

Thank you!
Photo of Jarek

Jarek

  • 2,398 Points 2k badge 2x thumb
IP-FIX is also limited:
IPv4:
• Source IP Address (32)
• Destination IP Address (32)
• L4 Source Port (16)
• L4 Destination Port (16)
• L4 Protocol (8)
• TOS (DSCP +ECN) (8)

Did you open FR only for SFlow ? Or sflow and ip-fix ?
--
Jarek
Photo of Alexandr P

Alexandr P, Embassador

  • 12,042 Points 10k badge 2x thumb
I opened case for sFlow, so FR only for sFlow.

Thank you!
Photo of Alexandr P

Alexandr P, Embassador

  • 12,042 Points 10k badge 2x thumb
Hello, all!

Is anybody can tell me about FR # 01182686?
Is there some update?

Thank you!

Photo of Ryan Mathews

Ryan Mathews, Alum

  • 8,988 Points 5k badge 2x thumb
Hey Alex.  I let your SE team know this Feature Request needs their attention.  

Thanks for head's up.
Photo of Alexandr P

Alexandr P, Embassador

  • 12,042 Points 10k badge 2x thumb
Hello, Ryan!

Waiting for update information.

Thank you for collaboration!