topic Re: protocol/port usage per interface in Network Security

protocol/port usage per interface

somanyholes — Mon, 11 Mar 2019 13:02:14 GMT

Are there any commands that will show the percentage (or something along those lines) of useage of protocols and ports on a ciso pix's interface.

Re: protocol/port usage per interface

Farrukh Haroon — Fri, 20 Jun 2008 10:37:36 GMT

There is support for NetFlow on Version 8.x of the Cisco Firewall. Otherwise you can have a look at this tool:

www.fireplotter.com

Regards

Farrukh

Re: protocol/port usage per interface

somanyholes — Fri, 20 Jun 2008 12:08:00 GMT

Hi Happs

Thanks for the response. Unfortunately I am not able to extract any information from the pix, so syslog/snmp etc are out of the equation. I only have the cli to use. Have a feeling this is not going to be possible.

Cheers

Re: protocol/port usage per interface

Farrukh Haroon — Fri, 20 Jun 2008 12:14:55 GMT

I only know of "show traffic" and "show perfmon"

Have a look at:

http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/s7.html#wp1222787

Regards

Farrukh

Re: protocol/port usage per interface

michael.leblanc — Fri, 20 Jun 2008 14:13:39 GMT

Farrukh:

Would the PIX have NetFlow commands equivalent to the following, which are available in the IOS?

ip flow-top-talkers

top 25

sort-by packets

show ip flow top-talkers

... if so, he could derive "some" of the benefits of NetFlow via the CLI output.

Re: protocol/port usage per interface

Farrukh Haroon — Fri, 20 Jun 2008 14:46:03 GMT

Michael the netflow support on the firewall is still limited. And it is not available for all platforms till now I think (only 8.1):

http://www.cisco.com/en/US/docs/security/asa/asa81/netflow/netflow.html

http://www.cisco.com/en/US/docs/security/asa/asa81/config/guide/monitor.html#wp1099818

Regards

Farrukh

Re: protocol/port usage per interface

michael.leblanc — Fri, 20 Jun 2008 15:02:45 GMT

Farrukh:

Good to know.

Thanks.