How to Find Busy talker on the Network ?

[MKCHAURASIA]

Hi

when we see serial link utilisation is high, how do we find the IP add of person doing heavy downloading/ busy talker on the network ?

Thanks

[JamesLuther]

Hi,

The best way would be to enable netflow on your router and install a netflow collector.

Once netflow is enabled you can try using a few of the commands below to see traffic flows, however you'll see things much clearer with a proper netflow collector (there are a few free ones out there)

show ip cache flow

show ip cache verbose flow

Regards

[John Blakley]

To add to James' response, if you don't have a collector, you can enable top-talkers on the router too.

ip flow-top-talkers

router(config-flow-top-talkers)# sort-by bytes

router(config-flow-top-talkers)# top 10

The above will configure the top 10 (and you can set lower or higher if you want).

To view:

router# sh ip flow top-talkers

HTH,

John

[Joseph W. Doherty]

NB:

Release Modification

12.2(25)S

This command was introduced.

12.3(11)T

This feature was integrated into Cisco IOS Release 12.3(11)T.

12.2(27)SBC

This command was integrated into Cisco IOS Release 12.2(27)SBC.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

Usage Guidelines

Enabling NetFlow

You must enable NetFlow on at least one interface in the router; and configure NetFlow top talkers before you can use the show ip flow top-talkers command to display the traffic statistics for the unaggregated top flows in the network. NetFlow top talkers also requires that you configure the sort-by and top commands. Optionally, the match command can be configured to specify additional matching criteria.

[bijithdmeethal]

Could someone explain this with example plz,  i mean with out put  to get better understanding

Thanks

[Tagir Temirgaliyev]

you can use not only netflow

also interface commands

ip accounting

and

ip nbar protocol-discovery

to see traffik use commands

sh ip accounting

sh ip bnar protocol-discovery