cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
370
Views
0
Helpful
1
Replies

To detect viruses if got to the switch or router

cindylee27
Level 1
Level 1

Hi,

I have a layer 2 switch 2950, and a router 2811, can I know if there is virus attack on one PC (IP: 10.33.33.1) i will be able to know where it coming from?

My customer basically wanna to pin down the PC who is being infected.

Thanks.

1 Reply 1

spremkumar
Level 9
Level 9

Hi

Do enable ip route-cache flow under the ethernet interface of Cisco 2811 where your local lan is connected.

Once you have enabled the same use show ip cache flow command to find out the traffic transactions with enough details like number of packets source/destination ip address as well as source/destination port numbers..

You can also verify the link for more info on the same..

http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124tcr/tnf_r/nfl_a1ht.htm#wp1485854

regds

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: