From: Gustavo Novais (gustavo.novais@novabase.pt)
Date: Thu Dec 15 2005 - 07:50:44 GMT-3
Yes I agree, after Jason Reid told me about ip nbar protocol discovery,
I saw the light!
I was assuming that by application they were meaning flow, but as we all
know that is not true in some cases.
So, just to clarify, we have the 5min av rate, and the total number of
packets input and output:
Rack1R6#sh ip nbar protocol-discovery
FastEthernet0/1
Input Output
----- ------
Protocol Packet Count Packet Count
Byte Count Byte Count
5min Bit Rate (bps) 5min Bit Rate (bps)
5min Max Bit Rate (bps) 5min Max Bit Rate
(bps)
------------------------ ------------------------
------------------------
dhcp 262 0
89604 0
0 0
2000 0
ospf 12726 6427
1268304 644506
0 0
0 0
bgp 4016 0
267162 0
0 0
0 0
icmp 8 0
560 0
0 0
0 0
citrix 0 0
0 0
0 0
0 0
cuseeme 0 0
0 0
Thank you for the help!
Gustavo Novais
-----Original Message-----
From: Church, Chuck [mailto:cchurch@netcogov.com]
Sent: quarta-feira, 14 de Dezembro de 2005 17:57
To: Gustavo Novais; Cisco certification
Subject: RE: IEWB3.0 lab 13 task 10.3 -- Netflow??
Sure sounds like a job for NBAR...
Chuck Church
Lead Design Engineer
CCIE #8776, MCNE, MCSE
Netco Government Services - Design & Implementation
1210 N. Parker Rd.
Greenville, SC 29609
Home office: 864-335-9473
Cell: 703-819-3495
cchurch@netcogov.com
PGP key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x4371A48D
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Gustavo Novais
Sent: Wednesday, December 14, 2005 12:31 PM
To: Cisco certification
Subject: IEWB3.0 lab 13 task 10.3 -- Netflow??
Hello
I'm having a doubt relatively to the interpretation of this question and
what should be its answer.
The question states:
"Your manager as expressed interest in finding out what kind of
application users on vlan X are using while at office. Configure R6 to
collect information about application traffic being sent to and received
from vlan X and store it locally.
This accounting should include both the total number of packets sent and
received as well as a 5 Minute utilization average."
According to this I see the keyword "application" meaning ports used,
therefore we are talking about flows. So, I can discard IP accounting
(that only accounts SrcIP DstIP, not full flow).
The problem is that by enabling netflow on the interface with ip flow
egress and ip flow ingress when I do sh ip cache flow I do not see the
"5minute utilization average".
Is my interpretation correct and we are talking about netflow here?
TIA
Gustavo Novais
This archive was generated by hypermail 2.1.4 : Mon Jan 09 2006 - 07:07:51 GMT-3