measuring syslog traffic utilization

[getwithrob]

I have 3 RME servers connecting to 3 remote syslog servers running the RSAC software across 3 seperate wide area links.

How could I measure the traffic/utilization on those 3 links to try to figure what percentage of the total is used for syslog messages.

P.S. RME and Campus are the only CiscoWorks apps I have.

[David Stanford · Accepted solution]

If you have a NAM or switch probe available you could use it to determine the amount of traffic sent on the specific port RSAC uses to forward messages to RME

[getwithrob]

As a matter of fact, the customer does have NAMs installed in their network!

[David Stanford]

If things are setup correctly you should be able to capture this traffic and see just how much it is generating.