Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

To detect viruses if got to the switch or router

Hi,

I have a layer 2 switch 2950, and a router 2811, can I know if there is virus attack on one PC (IP: 10.33.33.1) i will be able to know where it coming from?

My customer basically wanna to pin down the PC who is being infected.

Thanks.

1 REPLY

Re: To detect viruses if got to the switch or router

Hi

Do enable ip route-cache flow under the ethernet interface of Cisco 2811 where your local lan is connected.

Once you have enabled the same use show ip cache flow command to find out the traffic transactions with enough details like number of packets source/destination ip address as well as source/destination port numbers..

You can also verify the link for more info on the same..

http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124tcr/tnf_r/nfl_a1ht.htm#wp1485854

regds

103
Views
0
Helpful
1
Replies