From: HIERS, DAVID \(AIT\) (dh4578@sbc.com)
Date: Wed Dec 14 2005 - 14:51:23 GMT-3
NBAR?
David Hiers
CCIE 10734, CISSP
Systems Engineer
AT&T AESE
-###-
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
Gustavo Novais
Sent: Wednesday, December 14, 2005 9:31 AM
To: Cisco certification
Subject: IEWB3.0 lab 13 task 10.3 -- Netflow??
Hello
I'm having a doubt relatively to the interpretation of this question and
what should be its answer.
The question states:
"Your manager as expressed interest in finding out what kind of
application users on vlan X are using while at office. Configure R6 to
collect information about application traffic being sent to and received
from vlan X and store it locally.
This accounting should include both the total number of packets sent and
received as well as a 5 Minute utilization average."
According to this I see the keyword "application" meaning ports used,
therefore we are talking about flows. So, I can discard IP accounting
(that only accounts SrcIP DstIP, not full flow).
The problem is that by enabling netflow on the interface with ip flow
egress and ip flow ingress when I do sh ip cache flow I do not see the
"5minute utilization average".
Is my interpretation correct and we are talking about netflow here?
TIA
Gustavo Novais
This archive was generated by hypermail 2.1.4 : Mon Jan 09 2006 - 07:07:51 GMT-3