05-19-2014 02:50 PM - edited 03-07-2019 07:28 PM
Good afternoon.
I wan to filtrate the output of show ip cache flow command at cisco router to show the "Pkts column" but in descending order so we can find quickly the conversation with highest flow?
The next example shot a normal show ip cache flow output:
SITEL-CD56619_IBM#sh ip cache flow
IP packet size distribution (181730M total packets):
1-32 64 96 128 160 192 224 256 288 320 352 384 416 448 480
.000 .344 .097 .038 .031 .030 .023 .016 .013 .011 .009 .009 .006 .005 .004
512 544 576 1024 1536 2048 2560 3072 3584 4096 4608
.004 .004 .007 .029 .309 .000 .000 .000 .000 .000 .000
IP Flow Switching Cache, 278544 bytes
4079 active, 17 inactive, 1825222013 added
1398904086 ager polls, 0 flow alloc failures
Active flows timeout in 1 minutes
Inactive flows timeout in 10 seconds
IP Sub Flow Cache, 124104 bytes
4079 active, 1041 inactive, 1825172677 added, 1825172677 added to flow
0 alloc failures, 743954 force free
5 chunks, 148564 chunks added
last clearing of statistics 46w4d
Protocol Total Flows Packets Bytes Packets Active(Sec) Idle(Sec)
-------- Flows /Sec /Flow /Pkt /Sec /Flow /Flow
TCP-Telnet 312114695 72.6 12 263 926.5 4.2 6.4
TCP-FTP 10931634 2.5 10 65 27.2 1.7 3.8
TCP-FTPD 4090988 0.9 25 594 24.0 1.0 2.3
TCP-WWW 756762661 176.1 20 682 3535.2 8.8 5.0
TCP-SMTP 23664992 5.5 88 870 487.1 3.8 2.6
TCP-X 345382 0.0 42 743 3.3 0.5 6.2
TCP-BGP 1175 0.0 1 42 0.0 0.3 2.3
TCP-NNTP 1670 0.0 1 42 0.0 0.2 3.7
TCP-Frag 3 0.0 1 56 0.0 0.0 8.1
TCP-other 6215395150 1447.1 24 548 35999.1 2.5 5.1
UDP-DNS 1231998924 286.8 1 67 300.6 0.0 8.6
UDP-NTP 14905814 3.4 1 83 3.6 0.1 9.0
UDP-TFTP 41739 0.0 1 68 0.0 0.2 8.3
UDP-Frag 14 0.0 1 508 0.0 0.0 5.0
UDP-other 1707705333 397.6 1 202 687.3 0.7 8.2
ICMP 137151762 31.9 9 60 317.9 10.6 7.1
GRE 27 0.0 7 69 0.0 10.8 9.4
IP-other 472 0.0 1 35 0.0 0.0 8.3
Total: 10415112435 2424.9 17 544 42312.4 2.5 6.1
SrcIf SrcIPaddress DstIf DstIPaddress Pr SrcP DstP Pkts
Gi0/1 10.72.16.102 Gi0/0* 10.11.32.48 06 27ED A108 2
Gi0/0 10.252.2.10 Gi0/1 10.72.1.88 06 DE87 0087 7
Gi0/0 200.123.4.2 Gi0/1 10.72.1.1 11 0035 E9F3 1
Gi0/0 10.41.237.236 Gi0/1 10.72.1.1 06 F9F2 01BD 1
Gi0/1 10.45.1.2 Gi0/0 172.17.12.230 06 0017 0446 6
Gi0/1 10.45.1.7 Gi0/0 10.28.14.68 06 0050 E7DF 4
Gi0/1 10.72.16.41 Gi0/0 10.2.111.241 06 0017 C64A 2
Gi0/1 10.72.1.134 Gi0/0* 10.41.237.137 06 13C5 E29A 4
Gi0/1 10.72.1.88 Gi0/0 10.232.222.5 11 0035 4759 1
Gi0/1 10.72.1.134 Gi0/0* 10.41.236.88 06 13C5 E04A 1
--More--
The result that we want is the same but with Pkts Column in descending order.
Thanking you in advance.
Attn.
Solved! Go to Solution.
05-20-2014 01:05 PM
Hi,
I believe configuring NetFlow top-talkers feature would be the easiest way?
See http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/netflow/configuration/12-4t/nf-12-4t-book/cfg-nflow-top-talk.html#GUID-824723EE-2551-4D64-9E0B-F5DF065C83B9
for details.
Best regards,
Milan
05-20-2014 01:05 PM
Hi,
I believe configuring NetFlow top-talkers feature would be the easiest way?
See http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/netflow/configuration/12-4t/nf-12-4t-book/cfg-nflow-top-talk.html#GUID-824723EE-2551-4D64-9E0B-F5DF065C83B9
for details.
Best regards,
Milan
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide