Email Top Talker reports from your router

[netcproject]

Wouldn't it be nice if network devices could collect & process their own netflow data and email you the results? Well, now they can!

This tcl script tracks the local netflow cache and generates "Top Talker" reports. Reports are run from CLI or configured to run automatically from Kron with the results sent via email. The script works by tracking and periodically storing netflow cache data in local log files. The reporting engine analyzes the log files to provide Top Talker reports from any of the previous five days. This script runs locally and does not open or make network connections with the exception of the built-in IOS smtp_send_email function. Performs best on ISR G2 or similar with latest IOS.

[netcproject]

I've uploaded the latest version and included the Tcl source code.

[kchengva1]

the script works fine.

But the log shows a lot unknown user, I assume this is from cli command?

002960: Mar 13 18:12:54.413 UTC: %PARSER-5-CFGLOG_LOGGEDCMD: User:unknown user  logged command:!exec: enable
002961: Mar 13 18:13:04.413 UTC: %PARSER-5-CFGLOG_LOGGEDCMD: User:unknown user  logged command:!exec: enable
002962: Mar 13 18:13:14.413 UTC: %PARSER-5-CFGLOG_LOGGEDCMD: User:unknown user  logged command:!exec: enable
002963: Mar 13 18:13:24.413 UTC: %PARSER-5-CFGLOG_LOGGEDCMD: User:unknown user  logged command:!exec: enable
002964: Mar 13 18:13:34.413 UTC: %PARSER-5-CFGLOG_LOGGEDCMD: User:unknown user  logged command:!exec: enable
002965: Mar 13 18:13:44.413 UTC: %PARSER-5-CFGLOG_LOGGEDCMD: User:unknown user  logged command:!exec: enable
002966: Mar 13 18:13:54.413 UTC: %PARSER-5-CFGLOG_LOGGEDCMD: User:unknown user  logged command:!exec: enable