diff --git a/networking.md b/networking.md
index d38ac2b..9eb5811 100644
--- a/networking.md
+++ b/networking.md
@@ -1,3 +1,28 @@
+## How to get ASN report from sflowtools
+
+1. Find your sflowdecode directory with docker-compose.yaml file, cd to it.
+2. Run `docker-compose pull` to pull the latest images.
+3. Run `docker-compose up -d` to start the containers.
+4. Run `docker-compose exec sflowdecode /bin/bash` to get the bash shell.
+5. `cd /sflowdecode`
+6. `ls -la` - fine appropriate sflow csv file to process. It has format like `20250225-06.csv`, time is GMT.
+7. Run for example: `traffstat --traffic 20250225-06.csv`
+8. You will get report in terminal, similar to this:
+```
+Total traffic 15424 Mbps
+Top 10 ASNs:
+AS20940 AVG_BW:4347 Mbps PERC:28%
+AS32934 AVG_BW:3255 Mbps PERC:21%
+AS15169 AVG_BW:3208 Mbps PERC:20%
+AS2906 AVG_BW:551 Mbps PERC:3%
+AS35197 AVG_BW:521 Mbps PERC:3%
+AS16509 AVG_BW:442 Mbps PERC:2%
+AS13335 AVG_BW:369 Mbps PERC:2%
+AS60068 AVG_BW:337 Mbps PERC:2%
+AS396982 AVG_BW:186 Mbps PERC:1%
+AS62041 AVG_BW:137 Mbps PERC:0%
+```
+
 ## Bonding
 Typical bonding configuration