Type of traffic

[gtrampus]

I have lots of traffic going out on an interface. How is easiest way to determine what type of traffic it is, what's source and destinaton.

ACL?

Thanx,

Gregor

[attrgautam]

Enable ip route-cache flow on the interface.

[pkhatri]

Hi Gregor,

One option is to turn on IP accounting:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124cg/hiap_c/ichipip.htm#wp1050938

The other is to use NBAR protocol discovery:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/122t15/ftpdmib.htm

Hope that helps - pls do rate the post if it does.

Paresh

[royalblues · Accepted solution]

As gautam has suggested use netflow which will give you the traffic statistics.

you can use the ADventNet netflow analyzer to view the statistics and graphs. you can download a 30 day evaluation version from the net

http://download.adventnet.com/products/netflow/2028821/ManageEngine_NetFlowAnalyzer.exe

Use the following configuration on the routers

On all the interfaces enable

(config-if)#ip route-cache flow

(config)# ip flow-export destination 9996

(config)# ip flow-export version 5

HTH

Narayan

[gtrampus]

Thank you all. Atm i am playing with NetFlow analyzer and it works nicely

Gregor