Email Top Talker reports from your router

Document

Fri, 03/13/2015 - 11:22
Jul 1st, 2012

Wouldn't it be nice if network devices could collect & process their own netflow data and email you the results? Well, now they can!

This tcl script tracks the local netflow cache and generates "Top Talker" reports. Reports are run from CLI or configured to run automatically from Kron with the results sent via email. The script works by tracking and periodically storing netflow cache data in local log files. The reporting engine analyzes the log files to provide Top Talker reports from any of the previous five days. This script runs locally and does not open or make network connections with the exception of the built-in IOS smtp_send_email function. Performs best on ISR G2 or similar with latest IOS.

File: 
Package icon 66735-netc.zip
Loading.
kchengva1 Fri, 03/13/2015 - 11:22

the script works fine.

But the log shows a lot unknown user, I assume this is from cli command?

 

002960: Mar 13 18:12:54.413 UTC: %PARSER-5-CFGLOG_LOGGEDCMD: User:unknown user  logged command:!exec: enable
002961: Mar 13 18:13:04.413 UTC: %PARSER-5-CFGLOG_LOGGEDCMD: User:unknown user  logged command:!exec: enable
002962: Mar 13 18:13:14.413 UTC: %PARSER-5-CFGLOG_LOGGEDCMD: User:unknown user  logged command:!exec: enable
002963: Mar 13 18:13:24.413 UTC: %PARSER-5-CFGLOG_LOGGEDCMD: User:unknown user  logged command:!exec: enable
002964: Mar 13 18:13:34.413 UTC: %PARSER-5-CFGLOG_LOGGEDCMD: User:unknown user  logged command:!exec: enable
002965: Mar 13 18:13:44.413 UTC: %PARSER-5-CFGLOG_LOGGEDCMD: User:unknown user  logged command:!exec: enable
002966: Mar 13 18:13:54.413 UTC: %PARSER-5-CFGLOG_LOGGEDCMD: User:unknown user  logged command:!exec: enable
 

Actions

This Document

Related Content