"show ip flow top-talkers" output question

Unanswered Question
Jun 7th, 2010

Hello all,

I have a question about the "show ip flow top-talkers" command. The top enry for this 1841 router with a T1 connection is always this line:





SrcIf            SrcIPaddress    DstIf         DstIPaddress    Pr SrcP   DstP  Bytes

Se0/1/0       64.32.253.138   Local         71.16.240.14    32 6EB0 306B  2366K


How do I get more information about this connection? I looked at ip protocol 32 and it says it is the MERIT Internodal Protocol. Also what does the bytes field mean? Is that bytes per second or per "flow"?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Jan Nejman Tue, 06/08/2010 - 01:29

Hello,

  protocol is 0x32 (in hex) = 50 (dec). This protocol is ESP. I assume, this flow is an IPSEC tunnel.

The endpoint is your device (regarding to dest interface = local). The "Bytes" field means number of

bytes in the flow. It is not releated to bytes/sec. Please, feel free to contact me if you need more

information.


Kind regards,


Jan Nejman

Caligare, co.

http://www.caligare.com/

Actions

This Discussion