cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1624
Views
0
Helpful
1
Replies

HOW TO FILTRATE OUTPUT OF SHOW IP CACHE FLOW COMMAND AT ROUTER CISCO?

Good afternoon.

 

I wan to filtrate the output of show ip cache flow command at cisco router to show the "Pkts column" but in descending order so we can find quickly the conversation with highest flow?

 

The next example shot a normal show ip cache flow output:

SITEL-CD56619_IBM#sh ip cache flow
IP packet size distribution (181730M total packets):
   1-32   64   96  128  160  192  224  256  288  320  352  384  416  448  480
   .000 .344 .097 .038 .031 .030 .023 .016 .013 .011 .009 .009 .006 .005 .004

    512  544  576 1024 1536 2048 2560 3072 3584 4096 4608
   .004 .004 .007 .029 .309 .000 .000 .000 .000 .000 .000

IP Flow Switching Cache, 278544 bytes
  4079 active, 17 inactive, 1825222013 added
  1398904086 ager polls, 0 flow alloc failures
  Active flows timeout in 1 minutes
  Inactive flows timeout in 10 seconds
IP Sub Flow Cache, 124104 bytes
  4079 active, 1041 inactive, 1825172677 added, 1825172677 added to flow
  0 alloc failures, 743954 force free
  5 chunks, 148564 chunks added
  last clearing of statistics 46w4d
Protocol         Total    Flows   Packets Bytes  Packets Active(Sec) Idle(Sec)
--------         Flows     /Sec     /Flow  /Pkt     /Sec     /Flow     /Flow
TCP-Telnet   312114695     72.6        12   263    926.5       4.2       6.4
TCP-FTP       10931634      2.5        10    65     27.2       1.7       3.8
TCP-FTPD       4090988      0.9        25   594     24.0       1.0       2.3
TCP-WWW      756762661    176.1        20   682   3535.2       8.8       5.0
TCP-SMTP      23664992      5.5        88   870    487.1       3.8       2.6
TCP-X           345382      0.0        42   743      3.3       0.5       6.2
TCP-BGP           1175      0.0         1    42      0.0       0.3       2.3
TCP-NNTP          1670      0.0         1    42      0.0       0.2       3.7
TCP-Frag             3      0.0         1    56      0.0       0.0       8.1
TCP-other   6215395150   1447.1        24   548  35999.1       2.5       5.1
UDP-DNS     1231998924    286.8         1    67    300.6       0.0       8.6
UDP-NTP       14905814      3.4         1    83      3.6       0.1       9.0
UDP-TFTP         41739      0.0         1    68      0.0       0.2       8.3
UDP-Frag            14      0.0         1   508      0.0       0.0       5.0
UDP-other   1707705333    397.6         1   202    687.3       0.7       8.2
ICMP         137151762     31.9         9    60    317.9      10.6       7.1
GRE                 27      0.0         7    69      0.0      10.8       9.4
IP-other           472      0.0         1    35      0.0       0.0       8.3
Total:     10415112435   2424.9        17   544  42312.4       2.5       6.1

SrcIf         SrcIPaddress    DstIf         DstIPaddress    Pr SrcP DstP  Pkts
Gi0/1         10.72.16.102    Gi0/0*        10.11.32.48     06 27ED A108     2
Gi0/0         10.252.2.10     Gi0/1         10.72.1.88      06 DE87 0087     7
Gi0/0         200.123.4.2     Gi0/1         10.72.1.1       11 0035 E9F3     1
Gi0/0         10.41.237.236   Gi0/1         10.72.1.1       06 F9F2 01BD     1
Gi0/1         10.45.1.2       Gi0/0         172.17.12.230   06 0017 0446     6
Gi0/1         10.45.1.7       Gi0/0         10.28.14.68     06 0050 E7DF     4
Gi0/1         10.72.16.41     Gi0/0         10.2.111.241    06 0017 C64A     2
Gi0/1         10.72.1.134     Gi0/0*        10.41.237.137   06 13C5 E29A     4
Gi0/1         10.72.1.88      Gi0/0         10.232.222.5    11 0035 4759     1
Gi0/1         10.72.1.134     Gi0/0*        10.41.236.88    06 13C5 E04A     1
 --More--

 

The result that we want is the same but with Pkts Column in descending order.

 

Thanking you in advance.

 

Attn.

1 Accepted Solution

Accepted Solutions

milan.kulik
Level 10
Level 10

Hi,

 

I believe configuring NetFlow top-talkers feature would be the easiest way?

See http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/netflow/configuration/12-4t/nf-12-4t-book/cfg-nflow-top-talk.html#GUID-824723EE-2551-4D64-9E0B-F5DF065C83B9

for details.

 

Best regards,

Milan
 

View solution in original post

1 Reply 1

milan.kulik
Level 10
Level 10

Hi,

 

I believe configuring NetFlow top-talkers feature would be the easiest way?

See http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/netflow/configuration/12-4t/nf-12-4t-book/cfg-nflow-top-talk.html#GUID-824723EE-2551-4D64-9E0B-F5DF065C83B9

for details.

 

Best regards,

Milan
 

Review Cisco Networking for a $25 gift card