topic How can I see traffic throughput in Routing and SD-WAN

How can I see traffic throughput

Greg Maaaag — Tue, 05 Mar 2019 02:45:37 GMT

Hello!

We have 15 small branches with cisco 881w in every office, they use VPN site-to-site to vpn-concentrator on Vyatta.

I launched cacti monitoring of cisco 881's CPUs Errors, Traffics, NOn-unicast, Unicast.

I see that on 10.00 pm in one brunch when nobody works there, CPU load reaches 50% and traffic rizes up to 9mb\s

How can I see what's going on there? Is there any session monitor or some service for this?

How can I see traffic throughput

Phillip Remaker — Fri, 18 Jan 2013 19:04:50 GMT

Netflow is probably the best tool to use for analyzing the traffic.

How can I see traffic throughput

Greg Maaaag — Fri, 18 Jan 2013 19:49:45 GMT

thanks for your answer!

is netflow load cpu very much?

How can I see traffic throughput

g.agarwal1612 — Fri, 18 Jan 2013 20:48:57 GMT

HI ,

Please try and use netflow ip top-talkers to see the ip protocols utilization :

http://www.cisco.com/en/US/docs/ios-xml/ios/netflow/configuration/12-4t/cfg-nflow-top-talk.html#GUID-824723EE-2551-4D64-9E0B-F5DF065C83B9

1. enable

2. configure terminal

3. ip flow-top-talkers

4. top number

5. sort-by [bytes | packets

6. cache-timeout milliseconds

7. end

Regards,

How can I see traffic throughput

g.agarwal1612 — Fri, 18 Jan 2013 20:59:18 GMT

See the output

using

SH ip flow-top-talkers command

How can I see traffic throughput

Greg Maaaag — Sun, 20 Jan 2013 06:53:35 GMT

Thanks!

I started top-talkers, it shows statistics.

Is it possible to see what packets did go through cisco, for example, at 6.00 pm on 19.01.2013?

I turned on ip flow, i launched ManageEngine Netflow but it shows average statistics:(

How can I see traffic throughput

g.agarwal1612 — Mon, 21 Jan 2013 20:27:32 GMT

Hi ,

Please sne me the outpout of following when you see high CPU

show ip traffic

show proc cpu sorted

show proc cpu history

show ip cef switching statistics feature

show run

sh ver

show log

And let me know if you see this issue on a specific time of a day or is it random? do you have any bacth updates going on in you netwrok.

On netflow analyzer there should be an option to fetch data quickly and show instantaneou flows instead of average .

How can I see traffic throughput

Greg Maaaag — Sat, 26 Jan 2013 19:01:15 GMT

thank you for your answer!

the issue goes at random time, vpn tunnels go down, and clients loose internet connection but ip sla show that it's ok with echo icmp pakets to our vpn concentrator, our AD and next-hop....

Can you please suugest and good netflow analyzers? Is there any popular or "best practice" software?

Re: How can I see traffic throughput

Jernej Vodopivec — Sat, 26 Jan 2013 23:27:03 GMT

There are plenty of them.
For example: Scrutinizer (limited free edition also, Plixer), NetFlow Traffic analyzer (Solarwinds), WhatsUp Gold NetFlow Monitor...
ntop is good open source solution (GPL license).

Re: How can I see traffic throughput

Greg Maaaag — Sun, 27 Jan 2013 04:56:04 GMT

i've tried for a few days ManageEngine Netflow Analyzer, yes, it can draw nice graphs for directors but, for example, i have a call that lost connectivity in one our branch with 1941 in the edge, i see that snmp can monitor it, cpu up to 20-30%, taffic about 30mb\s of ISP's 50mb\s channel, ip sla echo icmp on cisco to next-hop, to our vpn-concentrator and to google dns shows no errors and I can't get it, why tunnels go down and thin clients turn off and all voip telephony which uses external asterisk server.

I go to ManageEngine Netflow analyzer but it just shows statiscis and i can't see in it sessions at the moment of this problem and I dont actually know what to do...

Re: How can I see traffic throughput

Don Jacob — Wed, 30 Jan 2013 08:51:42 GMT

NetFlow data can give you only bandwidth information on a per interface basis. I believe you need to monitor each VPN sessions when the CPU goes high as well as the bandwidth and try to drill down to the root cause. My suggestion will be adding an SNMP based monitor like ManageEngine OpManager to your NetFlow Analyzer or use SolarWinds NPM and NetFlow. Here is some info I found, though it talks about Cisco ASA.

http://thwack.solarwinds.com/thread/24990

Regards,

Don Thomas Jacob

www.netflowanalyzer.com

NOTE: Please rate posts and close questions if you have got the answer.