Easy way to locate what's 'eating' the outside interface bandwidth?

[Andy White]

Hello,

Via the CLI what is the best way to see what is eating our bandwidth on the outside interface?  I'm going to set up Netflow shortly, but in the meantime can the CLI quickly show this as I don't have access to the ASDM as I know this can show it.

Not sure I can capture the traffic and use wireshark to view?

Thanks

[matthewlacomb1]

do this:

cap mycap buffer 3000000 interface <outside-interface-name>

3MB buffer, will probably fill up quick.

to export, do

copy /pcap capture:mycap <ftp,tftp etc>

[Andy White]

So this basically captures 3mb of traffic going through the Outside interface?

[Dennis Mink]

Wireshark is a tool you can do this with, check a post i did a while ago on the topic:

https://ciscoshizzle.blogspot.com.au/search?q=congestion

its is by no means a silver bullet, and deploying a tool that can interpret netflow is by far more flexible.

Please rate if useful