I am facing a strange problem in my network. For WAN connectivity we are using 64 Kbps LL connected via serial link, the Tx and Rx load in the Serial interface is increasing drastically, even when there is no traffic flow or minimum traffic flow.
The strange thing is if I shut the Fast Ethernet port in the remote end, the Tx and Rx load in the near end serial interface increases suddenly and reaches up to txload 227/255 and rxload 227/255.
Need ur help in resolving the issue at the earliest.
Thanks in Advance.
You may want to enable netflow on the interface ingress and egress to see what's coming in and out of the network.
You can try:
Router(config-if)#ip route-cache flow
To show the top talkers:
Router# sh ip flow top-talkers
The top traffic generators will be listed at the top.
I am pasting the Show run int and show int output.
sh run int se1/0:30
ip address x.x.x.x x.x.x.x
ppp authentication chap
sh int se1/0:30
Serial1/0:30 is up, line protocol is up
Hardware is M32X with CSU/DSU
Internet address is x.x.x.x/30
MTU 1500 bytes, BW 64 Kbit, DLY 20000 usec,
reliability 255/255, txload 227/255, rxload 227/255
Encapsulation PPP, LCP Open
Open: IPCP, loopback not set
Keepalive set (10 sec)
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters 02:35:07
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 392
Queueing strategy: weighted fair
Output queue: 0/1000/64/392 (size/max total/threshold/drops)
Conversations 0/187/256 (active/max active/max total)
Reserved Conversations 0/0 (allocated/max allocated)
Available Bandwidth 48 kilobits/sec
5 minute input rate 57000 bits/sec, 107 packets/sec
5 minute output rate 57000 bits/sec, 107 packets/sec
142081 packets input, 8931367 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
141756 packets output, 8874954 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 output buffer failures, 0 output buffers swapped out
0 carrier transitions
Timeslot(s) Used:31, Transmitter delay is 0 flags
I'll take your word for it. I would've thought netflow would've been in that image, but I don't have that particular image to test.
Looks like you'd need:
to be able to support netflow.
Other than having a sniffer, I can't think of any other way you can configure anything on the router that would show you the traffic.