malhuda/AS-Stats
1
0
Fork 0
mirror of https://github.com/manuelkasper/AS-Stats.git synced 2025-02-20 11:44:12 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

netflowv9: always try to map IP to ASN

Browse Source 
Some netflow agents truncates 32b ASN to a 16b fields
Always checking the received ASN against our mapping should fix
that issue

Signed-off-by: Alexandre Bruyelles <git@jack.fr.eu.org>
This commit is contained in:
Alexandre Bruyelles 2021-01-08 11:45:11 +01:00
parent 93fb606c46
commit 696037ef08
No known key found for this signature in database
GPG Key ID: D304106391A41F03
1 changed files with 11 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
bin/asstatd.pl
View File

@ -380,13 +380,17 @@ sub parse_netflow_v9_data_flowset {
if (defined($snmpin) && defined($snmpout)) { if (defined($snmpin) && defined($snmpout)) {
if (not (defined($srcas))) { $srcas=0; } if (not (defined($srcas))) { $srcas=0; }
if (not (defined($dstas))) { $dstas=0; } if (not (defined($dstas))) { $dstas=0; }
if ($srcas == 0 && $dstas == 0 && defined($srcip) && defined($dstip)) { if defined($srcip) {
$srcas = replace_asn($srcip, $srcas); $srcas = replace_asn($srcip, $srcas);
$dstas = replace_asn($dstip, $dstas); }
# substitute 0 for own AS number
if ($myas{$srcas}) { $srcas = 0; } if defined($dstip) {
if ($myas{$dstas}) { $dstas = 0; } $dstas = replace_asn($dstip, $dstas);
} }
# substitute 0 for own AS number
if ($myas{$srcas}) { $srcas = 0; }
if ($myas{$dstas}) { $dstas = 0; }
handleflow($ipaddr, $inoctets + $outoctets, $srcas, $dstas, $snmpin, $snmpout, $ipversion, 'netflow', $vlanin, $vlanout); handleflow($ipaddr, $inoctets + $outoctets, $srcas, $dstas, $snmpin, $snmpout, $ipversion, 'netflow', $vlanin, $vlanout);
} }
} }