Custom Search

To advertise on this site email advertise@goatnetworking.com

Use NetFlow to view the data flows on a Cisco Router.

Site Admin
User avatar
Posts: 368
Joined: Wed Jan 04, 2012 2:36 pm

Use NetFlow to view the data flows on a Cisco Router.

Postby admin » Wed Oct 03, 2012 8:31 pm

Use NetFlow to view the data flows on a Cisco Router. This command will help you identify what protocols are being used on the router.

show ip cache flow



GoatRouter#show ip cache flow
IP packet size distribution (11453M total packets):
1-32 64 96 128 160 192 224 256 288 320 352 384 416 448 480
.000 .307 .164 .052 .254 .018 .069 .018 .006 .004 .007 .004 .003 .002 .003

512 544 576 1024 1536 2048 2560 3072 3584 4096 4608
.001 .001 .003 .013 .062 .000 .000 .000 .000 .000 .000

IP Flow Switching Cache, 278544 bytes
424 active, 3672 inactive, 1077626473 added
1577297327 ager polls, 0 flow alloc failures
Active flows timeout in 30 minutes
Inactive flows timeout in 15 seconds
IP Sub Flow Cache, 66824 bytes
424 active, 1624 inactive, 1077626436 added, 1077626436 added to flow
0 alloc failures, 5836 force free
2 chunks, 6958 chunks added
last clearing of statistics never
Protocol Total Flows Packets Bytes Packets Active(Sec) Idle(Sec)
-------- Flows /Sec /Flow /Pkt /Sec /Flow /Flow
TCP-Telnet 8319615 1.9 9 149 17.6 5.0 15.3
TCP-FTP 2152118 0.5 3 73 1.8 0.1 12.3
TCP-FTPD 14165 0.0 131 934 0.4 1.8 4.7
TCP-WWW 43886147 10.2 12 700 124.7 3.1 9.0
TCP-SMTP 146843 0.0 1 257 0.0 1.1 13.9
TCP-X 2425 0.0 2 50 0.0 0.0 9.6
TCP-BGP 621 0.0 1 42 0.0 0.0 9.2
TCP-NNTP 616 0.0 1 42 0.0 0.0 9.2
TCP-Frag 156 0.0 1 59 0.0 0.0 15.5
TCP-other 831596766 193.6 5 179 1136.9 2.0 13.4
UDP-DNS 16536413 3.8 1 92 5.4 1.8 15.5
UDP-NTP 20449017 4.7 1 76 6.7 0.4 15.4
UDP-TFTP 50213 0.0 4 59 0.0 4.4 15.5
UDP-Frag 23924 0.0 1 28 0.0 0.9 15.5
UDP-other 103497931 24.0 53 171 1286.4 7.2 15.4
ICMP 45381442 10.5 2 89 29.1 0.6 15.4
IGMP 1020459 0.2 1 81 0.2 0.0 15.4
IPv6INIP 355 0.0 132 667 0.0 7.9 15.5
IP-other 4545898 1.0 53 494 56.7 77.3 14.9
Total: 1077625124 250.9 10 205 2666.6 2.8 13.6

SrcIf SrcIPaddress DstIf DstIPaddress Pr SrcP DstP Pkts
Gi0/0 10.1.1.18 Se0/0/0 10.2.1.210 06 CE47 1E78 3544 ----> There should be many of these entries, one for each flow
Se0/0/0 10.2.1.2 Gi0/0 10.2.2.170 06 0017 C558 1

Return to Cisco

Twitter Facebook

Who is online

Users browsing this forum: No registered users and 1 guest