Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Wan Traffic Analysis

Hello all,

Is there any tools which can be used to monitor traffic on a T1 WAN link? For example, what programs and services are causing the most data traffic, are there any large data transfers taking place on the line (if so, what is the source and destination i.p's, etc etc

Thanks

6 REPLIES

Re: Wan Traffic Analysis

Hi,

You can use ip cache flow under the internet interface "ip route-cache flow", and then use show ip cache flow.

HTH, please do rate all helpful replies,

Mohammed Mahmoud.

Hall of Fame Super Gold

Re: Wan Traffic Analysis

Then for the easier access to netflow data choose a management tool like prtg or solarwinds that can use the netflow data export function on the router.

Re: Wan Traffic Analysis

Check out ethereal (free packet sniffer)... Your best bet is to capture traffic coming into the LAN interface of your edge router. This traffic is going to be destined for the internet (usually), and you can get a good idea of what is on the way out. You could use a tap and capture traffic going onto the T1 circuit, but it is a bit more painful to do.

Ethereal will classify traffic by source ip, destination ip, and ports. You can identify major bandwidth eaters very quickly.

Enjoy,

Tim

PS -- Other great products that do this, but on a retail basis: Network Instruments Observer, Sniffer Pro, etc.

New Member

Re: Wan Traffic Analysis

Hi and thanks for the responses.

I decided to start fooling around with ethereal. It works great but it only sniffs packets on the local computer interface.

How can I snif packets on the router interfaces from a PC on the network? Is it possible b/c the local traffic on my pc is useless to me.

Thanks again

Re: Wan Traffic Analysis

Hi,

According to your switch, you can use Port SPAN (Switched Port Analyzer) to monitor the traffic on the switch port to which the router is connected.

http://www.cisco.com/en/US/products/hw/switches/ps708/products_tech_note09186a008015c612.shtml

HTH, please do rate all helpful replies,

Mohammed Mahmoud.

Re: Wan Traffic Analysis

I have to agree that a Netflow program (NetQoS, Solarwinds Orion, etc) is the best for this by far. Actually the new Solarwinds toolset is coming out soon (v8) which will have a small Netflow tool in it too, you can get a free 30 day trial for this.

322
Views
0
Helpful
6
Replies