IP accounting

[ccotech00]

Can anyone please tell me if there is some kind of freeware or maybe some cmd on a Cisco router that i can use to do accounting on a WAN link ,i need to know the type of traffic travelling across the link and also the amounts of the specific types of traffic.

[paddyxdoyle]

Hi,

IP accounting records the number of bytes passing through your router based on an access list

http://www.cisco.com/en/US/products/sw/iosswrel/ps1831/products_command_reference_chapter09186a00800b3e17.html#wp1018815

Or Netflow does similar but with much more information

http://www.cisco.com/warp/public/732/Tech/nmp/netflow/index.shtml

HTH,

Paddy

[ccotech00]

Hi ,how does netflow work ,is it part of the IOS or is it a freestanding app on a pc or something ,do you have to purchase it ?

[paddyxdoyle]

Hi,

Its part of the IOS, you can enable on your interface using "ip route-cache flow".

If you get a netflow application you can export netflow information to an IP address but i can't remeber the command!.

To view it from the CLI you can use "sh ip cache flow"

Its also great for detecting devices infected with viruses as you can easily pick up hosts that are attempting to scan network ranges on specific ports.

HTH

Paddy

[ccotech00]

Hi Thanks ,netflow works great ,but what can i use to parse the info with ? Or do i have to buy a specific netflow app.