Top traffic to/from?

Answered Question
Apr 18th, 2007
User Badges:

I have a 3845 router that has a couple of interfaces generating a much larger amount of traffic than they should be. Is there a way to get a list of the IPs or MAC addresses, and how many octets they send/receive? The only way I've figured so far would be to create an access list permitting every IP address on the local networks (to and from) and then watching those counters...not a real good solution. ;-)


Thanks!



Correct Answer by Iain about 9 years 11 months ago

You need to consider implementing some sort of NetFlow collector system. We use NetFlow Tracker (recently acquired by Fluke). The way it works is you configure your router to export its netflow data to the server that is running the collector software. The software is able to present the data in a meaningful way.


http://www.crannog-software.com/index.php?go=Product.ShowDetail&ProductID=1


CiscoWorks can do this as well. However, we found that NetFlow tracker had more features at a lower cost. Runs on Windows and Linux.


If you can't afford the software, download an IOS image that has the "Netflow Top Talkers" feature. This will allow you to display some of the stats directly in the CLI.

Correct Answer by walleyewiz about 9 years 11 months ago

You could enable netflow on the 3845. Below is a link to some free netflow collectors:


http://www.networkuptime.com/tools/netflow/


Configuring Netflow:


http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgcr/switch_c/xcprt3/xcdnfc.htm


HTH.


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 3.7 (3 ratings)
Loading.
pciaccio Wed, 04/18/2007 - 10:27
User Badges:
  • Silver, 250 points or more

Make sure CEF is enabled on the router. Configure IP Route Cache Flow on the interface. Yuo can even use NBAR Protocol discoveryto see the type of traffic that is going through the interface. One good feature is to use the SDM (Secure Device Manager) this will provide to you a GUI of the network stats off the interface...Good Tool....Please rate

Correct Answer
Iain Thu, 04/19/2007 - 12:01
User Badges:

You need to consider implementing some sort of NetFlow collector system. We use NetFlow Tracker (recently acquired by Fluke). The way it works is you configure your router to export its netflow data to the server that is running the collector software. The software is able to present the data in a meaningful way.


http://www.crannog-software.com/index.php?go=Product.ShowDetail&ProductID=1


CiscoWorks can do this as well. However, we found that NetFlow tracker had more features at a lower cost. Runs on Windows and Linux.


If you can't afford the software, download an IOS image that has the "Netflow Top Talkers" feature. This will allow you to display some of the stats directly in the CLI.

Actions

This Discussion