What do the IN/OUT and TO/FROM AS Number Summary reports represent?

Document ID : KB000096807
Last Modified Date : 18/05/2018
Show Technical Document Details
Introduction:
What do the views AS Number summary report represent?
Question:
What do the IN/OUT and TO/FROM AS Number Summary reports represent?
Answer:
The AS Summary reports have IN and OUT views as well as TO and FROM views.

Each individual flow from a device, has an IN interface and OUT interface field, as well as Source AS number and a Dst AS Number.

For the IN/OUT views:
The IN view will show the top AS numbers, meaning both Source AS and Dst AS anytime that ifindex is listed as the IN interface.
The OUT view will show the top AS numbers, meaning both Source AS and Dst AS anytime that ifindex is listed as the OUT interface.
These two views do not do show you the direction of the AS traffic, it only shows which AS numbers were the top ones in any direction on the IN or OUT interface respectively.

For the To/From views:
The TO/From views use the Source and Destination AS number fields from each flow.
The TO view uses be the Destination AS field from the raw Netflow data.
The FROM view uses be the Source AS field from the raw Netflow data.
Additional Information:
https://docops.ca.com/ca-network-flow-analysis/9-3-8/en/using/interface-reports/work-with-interface-reports-and-data-views/analyze-interface-report-data/as-number-trend-views