Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

VIRUS INFO FROM CATALYST LAYER 3 switches

Hi ,

If i do show arp nat translation * on the router I can find the IP address of the machine that is doing the icmp flooding to other machines .Is there a similar thing on the switches 4006 layer 3 where i can find machines which are generating lot of icmp traffic across vlans .

Any help appreciated .

thanks

Raj

1 REPLY
Community Member

Re: VIRUS INFO FROM CATALYST LAYER 3 switches

Hi,

ou can enable netflow or IP accounting on the VLAN interfaces to get these informations. Please find below the URL to have a look at the security advisory published by cisco, where it explains on how to find out whether any virus attack is happenning.

http://www.cisco.com/warp/public/707/cisco-sn-20030814-blaster.shtml

102
Views
0
Helpful
1
Replies
CreatePlease to create content