I am trying to configure the NetFlow Top Talkers function on an ASR1002 with ADVENTERPRISEK9-M, Version 15.2(4)S. With this new Hardware and Software I am surprised to see that the command:
cannot be found on the CLI - it's just not there. What could the reason be for this?
Many thanks in advance for any suggestions
Netflow top talkers feature is not supported yet on ASR1k.
**Please grade this post if you find it useful.
The old top talker function is replaced by flexible netflow commands. For example
In global config mode, create a flexible flow monitor
flow monitor NETFLOW-1
description monitor for ipv4 flows
record netflow ipv4 original-input
Assign the flow monitor to the interface
ip address 10.x.x.x 255.255.255.252
ip flow monitor NETFLOW-1 input
Exec mode CLI command below will provide similar output to the old top talkers
show flow monitor NETFLOW-1 cache format table
The problem is the output of "show flow monitor NETFLOW-1 cache format table" doesnt have any order ,seems doesnt show most top talkers like old platforms...
how can I sort em to show me who is most BW consuming ?in case of seeking attackers
Thank you for the information, but is there any way to get it to output the data in bytes instead of number of packets? The problem we are trying to isolate in the top talkers is users who are doing large FTP or HTTP downloads, they have very large packet sizes but a lower number of packets than other more chatty communication.