Show connections on a 1721

Answered Question
Dec 14th, 2007

I currently have a site connected via a T1 and it is getting flooded. Is there a command that I can run on the 1721 Router that will show all connections so that I can identify the source / destination IP addresses of all traffic? I tried "show connections" but that didn't have the info that I needed.

Thanks in advance!

I have this problem too.
0 votes
Correct Answer by Edison Ortiz about 8 years 11 months ago
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
TrueFX Fri, 12/14/2007 - 08:23

Attached is the 'show version'

Cisco Internetwork Operating System Software

IOS (tm) C1700 Software (C1700-K9O3SY7-M), Version 12.2(8)T1, RELEASE SOFTWARE (fc2)

TAC Support:

Copyright (c) 1986-2002 by cisco Systems, Inc.

Compiled Sat 30-Mar-02 14:18 by ccai

Image text-base: 0x80008108, data-base: 0x80D2C08C

ROM: System Bootstrap, Version 12.2(7r)XM1, RELEASE SOFTWARE (fc1)

pob-1721 uptime is 23 minutes

System returned to ROM by reload at 09:56:54 CST Fri Dec 14 2007

System restarted at 09:58:24 CST Fri Dec 14 2007

System image file is "flash:c1700-k9o3sy7-mz.122-8.T1.bin"

cisco 1721 (MPC860P) processor (revision 0x100) with 44237K/4915K bytes of memory.

Processor board ID FOC06150DEF (1625455792), with hardware revision 0000

MPC860P processor: part number 5, mask 2

Bridging software.

X.25 software, Version 3.0.0.

1 FastEthernet/IEEE 802.3 interface(s)

1 Serial network interface(s)

1 Virtual Private Network (VPN) Module(s)


32K bytes of non-volatile configuration memory.

16384K bytes of processor board System flash (Read/Write)

Configuration register is 0x2102

TrueFX Fri, 12/14/2007 - 08:51

I type the following :

config t

int se 0

ip flow ingress

--- Unknown command

I don't think my router supports netflow.

TrueFX Fri, 12/14/2007 - 09:27

Thank you so much! I was able to use the Netflow data to track down the culprit!

I can tell that I will be using this a lot in the future!

TrueFX Fri, 12/14/2007 - 08:30

As far as IP Accounting, we don't have any ACLs on the system, and it looks like IP Accounting only tracks failures agains the ACLs. Is that correct?



This Discussion