IP cache flow

Unanswered Question
Jul 11th, 2008
User Badges:

Hi,


How do we use "ip cache flow" to capture inbound and outbound traffic to router.


I tried configuring ip route-cache flow router interface and it doesn't seems to give required output when i do 2show ip cache flow"


Cheers,


Rajesh

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
a.alekseev Fri, 07/11/2008 - 02:28
User Badges:
  • Gold, 750 points or more

what are expecting to see?

rajeshk200_2 Fri, 07/11/2008 - 02:36
User Badges:

Hi,

Thanks for the response.

To find traffic flow for particular source and destination IP's and conform traffic passing the router.


Cheers,

Rajesh

Hello, you have the right interface command:

Are you using a netflow application to see this graphically as the output from "sh ip cache flow" is kind of cryptic (hex output).


If you get a netflow analyzer such as Solarwinds you can export these flows to an NMS and get something that is really easy to read. http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6555/ps6601/prod_white_paper0900aecd80406232.html


!

interface FastEthernet0/1

ip address x.x.x.x y.y.y.y

ip nbar protocol-discovery

ip route-cache flow

duplex auto

speed auto

!

Haris P Sat, 07/12/2008 - 00:34
User Badges:
  • Bronze, 100 points or more

normally ip cache-flow records only one diarection only (ie the traffic coming to the interface ) . To get the compleete information you can put ip cache-flow in incoming and outgoing interface


Regards

Haris

mohammedmahmoud Sat, 07/12/2008 - 01:31
User Badges:
  • Green, 3000 points or more

Hi,


Totally agree with Haris, ip route-cache flow enables ingress NetFlow accounting for packets that are received by the interface, if you require both traffic flow directions, then you'll need to enable it on both incoming and outgoing interfaces, and please do note a very important thing, in the past ordinary IP accounting can only account the traffic going through the router, while current Netflow also account the traffic destined to the router (marked with "Local" DstIf).


BR,

Mohammed Mahmoud.

Actions

This Discussion