IP cache flow

[rajeshk200_2]

Hi,

How do we use "ip cache flow" to capture inbound and outbound traffic to router.

I tried configuring ip route-cache flow router interface and it doesn't seems to give required output when i do 2show ip cache flow"

Cheers,

Rajesh

[a.alekseev]

what are expecting to see?

[rajeshk200_2]

Hi,

Thanks for the response.

To find traffic flow for particular source and destination IP's and conform traffic passing the router.

Cheers,

Rajesh

[jeff.feeney]

Hello, you have the right interface command:

Are you using a netflow application to see this graphically as the output from "sh ip cache flow" is kind of cryptic (hex output).

If you get a netflow analyzer such as Solarwinds you can export these flows to an NMS and get something that is really easy to read. http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6555/ps6601/prod_white_paper0900aecd80406232.html

!

interface FastEthernet0/1

ip address x.x.x.x y.y.y.y

ip nbar protocol-discovery

ip route-cache flow

duplex auto

speed auto

!

[Haris P]

normally ip cache-flow records only one diarection only (ie the traffic coming to the interface ) . To get the compleete information you can put ip cache-flow in incoming and outgoing interface

Regards

Haris

[mohammedmahmoud]

Hi,

Totally agree with Haris, ip route-cache flow enables ingress NetFlow accounting for packets that are received by the interface, if you require both traffic flow directions, then you'll need to enable it on both incoming and outgoing interfaces, and please do note a very important thing, in the past ordinary IP accounting can only account the traffic going through the router, while current Netflow also account the traffic destined to the router (marked with "Local" DstIf).

BR,

Mohammed Mahmoud.