cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
694
Views
0
Helpful
4
Replies

Logging Traffic goin thru FE router

pillairamesh
Level 1
Level 1

Hi

I have 1721 router with 12.2 IOS.

Mrtg from the ISP shows high download during the weekends

I would like to know which machines from the lan, which portocol and which port etc.. is doin.

I would like to track and stop.

What are my options. I have tried IP ACCOUNTING without much luck

regds

Ramesh

4 Replies 4

peterledwidge
Level 1
Level 1

Hi,

Do you have your LAN switch monitored by MTRG?

If so you could check the ports on this to see if

any particular host is at high utilization over the

weekend.

I do have l3 and l2 switch's, will try that option.

But as my setup has 10 to 12 switch of variant make. I felt it would be tidous and cumbersome to do that.

Wont it be easier to monitor the router where all the traffic are bound to.

regds

Ramp

johansens
Level 4
Level 4

Use NetFlow to get the IP-information (including tcp/udp ports etc.)

Export into a linux-machine (f.ex) and use the following tools:

http://www.splintered.net/sw/flow-tools/

st_kannan
Level 1
Level 1

You can use "ip nbar protocol-discovery" in the interface it will all your requirment.