We are currently experiencing high utillization on our regional WAN connections.
In this scenario, we used to track this situation using IP accounting on the WAN interfaces.
We recently upgraded WAN routers to cisco WS-C6509-E Mutilayer switches.
When we tried to perform IP accounting on these devices, We get a warning <Accounting will exclude mls traffic when mls is enabled>
That way we cannot track the defaulting hosts.
Does anyone have an idea how we can overcome this.
I would use netflow to analyze traffic flows on the WAN links
Hope to help