"show ip flow top-talkers" output question

[tjd2112pcca]

Hello all,

I have a question about the "show ip flow top-talkers" command. The top enry for this 1841 router with a T1 connection is always this line:

SrcIf            SrcIPaddress    DstIf         DstIPaddress    Pr SrcP   DstP  Bytes

Se0/1/0       64.32.253.138   Local         71.16.240.14    32 6EB0 306B  2366K

How do I get more information about this connection? I looked at ip protocol 32 and it says it is the MERIT Internodal Protocol. Also what does the bytes field mean? Is that bytes per second or per "flow"?

[Jan Nejman]

Hello,

  protocol is 0x32 (in hex) = 50 (dec). This protocol is ESP. I assume, this flow is an IPSEC tunnel.

The endpoint is your device (regarding to dest interface = local). The "Bytes" field means number of

bytes in the flow. It is not releated to bytes/sec. Please, feel free to contact me if you need more

information.

Kind regards,

Jan Nejman

Caligare, co.

http://www.caligare.com/