cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
397
Views
0
Helpful
1
Replies

Netflow data on saturated link

I've got a serial interface on a 2811 router that has been showing an rx load of 252/255 for about 48 hours.

I've got netflow enabled on it and when I put an ACL on the serial interface to block the offending IP address it does not seem to be working. I've got the log parameter on there and its not showing in the log and the rx load is not decreasing.

Netflow shows it as protocol 27 and the source and destination addresses are not any of the networks configured on this router.

What is going on here? Thanks for any help on this.

1 Reply 1

wong34539
Level 6
Level 6

Perform the steps to verify that NetFlow is operational and to view the NetFlow statistics.

It helps to find the exact problem.

1. show ip flow interface

2. show ip cache flow

3. show ip cache verbose flow

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Innovations in Cisco Full Stack Observability - A new webinar from Cisco