cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2126
Views
0
Helpful
2
Comments
netcproject
Community Member

Wouldn't it be nice if network devices could collect & process their own netflow data and email you the results? Well, now they can!

This tcl script tracks the local netflow cache and generates "Top Talker" reports. Reports are run from CLI or configured to run automatically from Kron with the results sent via email. The script works by tracking and periodically storing netflow cache data in local log files. The reporting engine analyzes the log files to provide Top Talker reports from any of the previous five days. This script runs locally and does not open or make network connections with the exception of the built-in IOS smtp_send_email function. Performs best on ISR G2 or similar with latest IOS.

Comments
netcproject
Community Member

I've uploaded the latest version and included the Tcl source code.

kchengva1
Beginner
Beginner

the script works fine.

But the log shows a lot unknown user, I assume this is from cli command?

 

002960: Mar 13 18:12:54.413 UTC: %PARSER-5-CFGLOG_LOGGEDCMD: User:unknown user  logged command:!exec: enable
002961: Mar 13 18:13:04.413 UTC: %PARSER-5-CFGLOG_LOGGEDCMD: User:unknown user  logged command:!exec: enable
002962: Mar 13 18:13:14.413 UTC: %PARSER-5-CFGLOG_LOGGEDCMD: User:unknown user  logged command:!exec: enable
002963: Mar 13 18:13:24.413 UTC: %PARSER-5-CFGLOG_LOGGEDCMD: User:unknown user  logged command:!exec: enable
002964: Mar 13 18:13:34.413 UTC: %PARSER-5-CFGLOG_LOGGEDCMD: User:unknown user  logged command:!exec: enable
002965: Mar 13 18:13:44.413 UTC: %PARSER-5-CFGLOG_LOGGEDCMD: User:unknown user  logged command:!exec: enable
002966: Mar 13 18:13:54.413 UTC: %PARSER-5-CFGLOG_LOGGEDCMD: User:unknown user  logged command:!exec: enable
 

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Quick Links