Traffic Flow ( netflow) Autonomous system information

gustkiller · Mon Aug 02, 2010 11:30 pm

Hi,

there's any way to mikrotik "stamp" the AS information in trafficflow ? like cisco running bgp?

Thanks!

Eising · Fri Aug 06, 2010 8:42 am

There's currently no way of doing that, however I've suggested it to MikroTik before and they were positive towards implementing it, so I suggest you (and everyone else who need this) start e-mailing support@mikrotik.com about it.

gustkiller · Fri Aug 06, 2010 4:46 pm

that was exectly what i did last week, opened a support ticket about these feature.

Sun Aug 08, 2010 8:40 am

I have emailed them too. This would be very useful in combination with nfacct

gustkiller · Sun Aug 08, 2010 3:57 pm

we´re now connecting to a mutiple peers ( transit) and IXPs. So the ASN information is very useful to know when or where buy more access to Ixp or transport networks , or who AS is better to do some bidirectional traffic agreements.

alexandrecorrea · Wed Aug 25, 2010 5:46 am

also sent two emails to support, but I believe they will not implement this in future versions.

This option is essential for anyone who uses BGP with IXP's...

I'm pulling down all mikrotik routers, switching back to cisco boxes because i need AS info on flow !! I like mikrotik as router.. BUT some features need more priority !! (like exportin AS info in flows) and run BIRD as bgp daemon !!!

Eising · Thu Aug 26, 2010 4:04 pm

MikroTik needs to fix it's netflow in general. Every time I try it, I get a new bug. I have enabled it on four different BGP routers all with four different non-reproducible bugs.

agshekeloh · Thu Oct 20, 2011 5:33 pm

Mikrotik support answered my query on this.

"currently it is not possible. We will evaluate this feature and possibly add to
planned feature list."

So, there's the definitive answer.

gustkiller · Fri Oct 21, 2011 9:37 pm

that will be awesome!

Fri Oct 21, 2011 11:35 pm

Mikrotik, please add this feature!!!

alexjhart · Sun Mar 03, 2013 7:00 pm

+1
I am surprised this hasn't been implemented yet.

EMOziko · Sun Mar 10, 2013 4:11 pm

I was searching about this and just found this thread. Please Mikrotik add this feature.

AlArenal · Thu Sep 26, 2013 4:00 pm

+1 for BGP AS in flows

hapi · Thu Sep 26, 2013 4:14 pm

and add CISCO NAT (NEL) (NAT event logging) to traffic flow.

mhviper · Thu Dec 05, 2013 6:54 pm

bump this. It's an essential feature for everyone how is really working with ccr.

robertik · Wed Apr 02, 2014 4:53 pm

+1 - with 20 peers it is really needed

Hammy · Sun Apr 06, 2014 2:36 am

*bump*

mhviper · Thu Feb 26, 2015 4:31 pm

*bump because it's important*

unixman · Tue May 26, 2015 8:45 pm

Can't agree more. Writing a netflow application, it is fundamental. Go for it !

Hammy · Tue Jun 02, 2015 4:54 pm

Also, can we have S-Flow?

neptune · Mon Aug 10, 2015 3:49 pm

*bump because it's important*

+1

neptune · Mon Aug 10, 2015 3:55 pm

I could not agree more.

For the moment I have to configure a dedicated box to peer with all my EP routers to know where is my traffic going through

Thu Aug 13, 2015 1:28 pm

5 years later, still waiting...

StubArea51 · Thu Aug 13, 2015 3:58 pm

+1 for this and BGP session status in SNMP.

Oh and OAM for ethernet.....ok i'll stop now

Thu Aug 13, 2015 4:13 pm

+1 for this and BGP session status in SNMP.

Oh and OAM for ethernet.....ok i'll stop now

Strange, I have emailed Mikrotik support requesting both of those features.

Cha0s · Sat Nov 14, 2015 5:21 pm

jmginer · Fri Dec 18, 2015 9:34 pm

I agree

+1

Hammy · Sat Dec 19, 2015 3:32 am

IPFIX and S-Flow too.

Sat Dec 19, 2015 4:52 am

IPFIX and S-Flow too.

+1 sflow is a must for rapid DDoS detection.

Hammy · Sat Dec 19, 2015 5:11 am

Flowspec goes along with DDoS mitigation of flows.

ploquets · Mon Feb 08, 2016 12:22 am

+1 for AS information on netflow!!!

chubbs596 · Mon May 23, 2016 10:31 am

+1 for AS information on netflow!!!

bajodel · Tue May 24, 2016 9:48 am

+1 ..

asturmas · Fri Jun 10, 2016 5:04 am

+1 feature for ROSv7 i think..

riaanmaree · Thu Jun 16, 2016 11:17 pm

We also need this

Sent from my SM-G925F using Tapatalk

tomasi · Tue Aug 16, 2016 8:29 pm

+1

ropebih · Sat Sep 10, 2016 6:00 pm

+1 sflow

borisk · Sun Sep 11, 2016 7:41 pm

+1 and bird!

bmv · Tue Sep 13, 2016 10:55 am

+1.
Have enquired separately on this forum before about this I believe.

omidkosari · Mon Nov 21, 2016 4:15 pm

+1 or a workaround !!

ploquets · Thu Jan 19, 2017 10:42 pm

bump!

riaanmaree · Sat Jan 28, 2017 5:09 pm

Yup. Still waiting for this feature...

Sent from my SM-G925F using Tapatalk

mmabob · Fri Jul 14, 2017 6:41 pm

+1

We need this feature.

berlo · Mon Jul 17, 2017 3:06 am

As workaround configure on vm/server nprobe + ntopng. You can create virtual interface. For example create a file /etc/ntopng/nprobe-mikrotik.conf

--zmq="tcp://*:42165"
--collector-port=9996
-n=none
-i=none

where 9996 is the port where you receive flow.

create ntopng.conf file and insert

-G=/var/run/ntopng.pid
-i=tcp://127.0.0.1:42165

start it and connect to https://yourserver:3000

Go under Hosts -> Autonomous Systems and you will be able to see flow grouped for AS

alfredo · Wed Aug 23, 2017 3:00 pm

+1, it would be awesome to get AS numbers in netflow. As others said, any serious traffic analysis at the AS level is not possible without this.

cmurrayis · Thu Aug 27, 2020 5:34 am

+100 we need this

schorsch · Sun Feb 21, 2021 6:35 pm

Is it really true, that after more then 10 years of the feature request(s) this "feature" is not already implemented?
Or am I doing something wrong at the configuration?
I get adresses and protocols.... but no AS information...

If routos is not able to deliver this information, do you have any hint for me to get this informatioen (except replace with cisco/juniper ;) ).

Regards
Thomas

tishri · Fri Nov 19, 2021 12:50 pm

+100000000000000000 . We spend so much on mikrotik. What are they doing?

ilmars · Fri Jan 27, 2023 4:23 pm

That would be a really useful information. +1000

Who is online