Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

LAN Traffic

Hi All

how do i check which ip address is generating more traffic on my network, i have cisco 2800 of router.

let me know if there is any utility available as i dont have any third party too running on my network.

- Dhaval Tandel

6 REPLIES
Hall of Fame Super Blue

Re: LAN Traffic

Hi Dhaval

You can use ip accounting if you just want to see source and destination IP addresses and number of packets/bytes.

Attached is a link for configuring ip accounting. Please take note of the but at the end about possible performance degradation, it is not something you want to be running all the time.

To view the output

router# sh ip accounting

http://www.cisco.com/en/US/products/sw/iosswrel/ps5187/products_command_reference_chapter09186a008017d169.html#wp1091971

HTH

Jon

Re: LAN Traffic

HI Dhaval,

Jon is correct.

#show ip accounting

will provide the Source IP, Destination IP, Packets Transferred, Bytes Transferred Details.

Permanently enabling the ip accouting feature on CISCO Equipment will increase the CPU Load of the Device

DO RATE ALL HELPFUL POSTS

Best Regards,

Guru Prasad R

New Member

Re: LAN Traffic

Hello

i believe is not enabled by default.

- Dhaval Tandel

Hall of Fame Super Blue

Re: LAN Traffic

Dhaval

No it is not enabled by default. You will need to turn it on and when you have found what you need turn it off again.

Jon

New Member

Re: LAN Traffic

Hi,

You can enable on a per interface basis.

go to that interface

#ip accounting output-packets

#show ip accouting

Bronze

Re: LAN Traffic

In addition to what is mentioned above, you can also use "show ip cache flow", this command will show you source and destination IP address with source and destination ports "in hexadecimal". This show command is very helpful since it is automatically updated but the show ip accounting is not updated or refreshed. YOU NEED to do clear ip accounting since the data is incremental from last clear ip accounting.

Please note, if you like to do "show ip cache flow" you need to enable the following command at the interface mode

"ip route-cache flow"

You can forward this ip cache flow information to web based monitor application like NetFlow Analyzer 4. This tool is very helpful.

Abd Alqader

295
Views
3
Helpful
6
Replies