cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3087
Views
0
Helpful
1
Replies

"show ip flow top-talkers" output question

tjd2112pcca
Level 1
Level 1

Hello all,

I have a question about the "show ip flow top-talkers" command. The top enry for this 1841 router with a T1 connection is always this line:

SrcIf            SrcIPaddress    DstIf         DstIPaddress    Pr SrcP   DstP  Bytes

Se0/1/0       64.32.253.138   Local         71.16.240.14    32 6EB0 306B  2366K

How do I get more information about this connection? I looked at ip protocol 32 and it says it is the MERIT Internodal Protocol. Also what does the bytes field mean? Is that bytes per second or per "flow"?

1 Reply 1

Jan Nejman
Level 3
Level 3

Hello,

  protocol is 0x32 (in hex) = 50 (dec). This protocol is ESP. I assume, this flow is an IPSEC tunnel.

The endpoint is your device (regarding to dest interface = local). The "Bytes" field means number of

bytes in the flow. It is not releated to bytes/sec. Please, feel free to contact me if you need more

information.

Kind regards,

Jan Nejman

Caligare, co.

http://www.caligare.com/

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: