Netflow bug on 3-GE cards (Trident) in Cisco GSRs

Hey folks,

Sharing some knowledge to try and save frustration. I think this is on-topic, forgive me if it isn't.

We were struggling to get netflow to work on our 3-port GigE cards in our GSRs. I'll spare you the ugly details, but a few maintenance windows and many useless TAC calls later, we finally were directed to the following Cisco Bug ID:
CSCdu72555

Turns out you can only run netflow on the first port of a 3-GigE port on the current S-tract software rev. If you have been struggling with this as well, I'm eager to hear about it off-list.

Have a great weekend.

- Dani

In 12.0.15S you cannot use access-lists on subinterface on the 3GE either.
Wonder if that's a software bug too, or hardware limitation (like the MTU
difference on the 3GE compared to the 1GE).

Anyone?

Actually Cisco has never supported ACLs on Engine 0 or Engine 1 cards in
the GSR. Used to be that you could apply those ACLs, but they were
implemented by the router very erratically. Cisco finally removed the
ability to apply ACLs to an ineligible interface because the TAC was tired
of telling people "it's not supported, even though it's there."

Best wait another 6 months for the Engine 2 10xGIGE card which will
support ACLs, or change to/add something from the 7xxx platform.
DownReving the router isn't really an option, like I said because the ACLs
never really worked right anyway. I don't remember the exact details (I
can get them if anyone wants) but I believe it did something like
arbitrarily testing random packets with random rules, whereas some
packets would get thru without being checked at all.

Hi, all.

I'm trying to find a list/table of AS names by ASN, preferably
tab-delimited, that I can use in spreadsheets and scripts. (Like, e.g., the
Cidr Report)

Can anyone give me an idea where I might find this sort of thing?

Thanks,
Jeb Linton

ftp://ftp.arin.net/netinfo/asn.txt

Last time i asked RIPE did not have a similar list.
Dont know about APNIC.

A couple of kindly souls have directed me to the ARIN asn.txt listing -
thanks to both.

I realized I wasn't asking for the right thing - I said AS names, when what
I'm actually looking for is the name of the company, in regular English
(mostly). (again as in e.g. Tony Bates' Cidr Report)

Apologies, and thanks again!

- Jeb

I don't know if such a beast exists, but you could certainly write a perl
script to do the lookups if you have the ASN's. Use of the geektools.com
whois proxy might help immensly.

Regards,

> I realized I wasn't asking for the right thing - I said AS names, when what

    > > I'm actually looking for is the name of the company, in regular English
    > > (mostly). (again as in e.g. Tony Bates' Cidr Report)
    >
    > I don't know if such a beast exists, but you could certainly write a perl
    > script to do the lookups if you have the ASN's.

Uh, I did that, and it was a useful starting-point, but I still had to
edit every single one by hand. I think I go through about the first
2,000. I'll try to get it posted somewhere publicly. I did it for a
table in an internal diagnostic tool.

                                -Bill

http://www.telstra.net/ops/bgp/asnames.txt

"Jeb R. Linton" wrote:

A couple of kindly souls have directed me to the ARIN asn.txt listing -
thanks to both.

I realized I wasn't asking for the right thing - I said AS names, when what
I'm actually looking for is the name of the company, in regular English
(mostly). (again as in e.g. Tony Bates' Cidr Report)

If you are looking for ASNs in the RIPE region, you can find them in the
RIPE Database or in the flat file:
ftp://ftp.ripe.net/ripe/dbase/split/ripe.db.aut-num.gz

You will need to perform some post processing to get the table you want.

Please note, that this data is protected by the copyright and some of
the information may not be accurate.

Regards,

Andrei