Re: [c-nsp] need advice to analysis traffic immediately

2010-12-10 Thread Jeff Wojciechowski
I'll second Josephs recommendation on Plixer's Scrutinizer. To be honest, I 
don't know if I would ever be able to run a network without it. The detail and 
features are GREAT. (And their support is awesome too).

Thanks,

-Jeff


-Original Message-
From: cisco-nsp-boun...@puck.nether.net 
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Joseph Jackson
Sent: Thursday, December 09, 2010 12:52 PM
To: Deric Kwok; Cisco Network Service Providers
Subject: Re: [c-nsp] need advice to analysis traffic immediately

Enable netflow on the router and export it to a collector.

Here's a free one that's pretty.

http://www.plixer.com/



-Original Message-
From: cisco-nsp-boun...@puck.nether.net 
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Deric Kwok
Sent: Thursday, December 09, 2010 12:43 PM
To: Cisco Network Service Providers
Subject: [c-nsp] need advice to analysis traffic immediately

Hi

When the bandwidth is high / spike, how can I be easy way to identify the 
traffic coming from in cisco

In linux, I can run the iftop -i int

Thank you
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net 
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net 
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

This electronic mail (including any attachments) may contain information that 
is privileged, confidential, or otherwise protected from disclosure to anyone 
other than its intended recipient(s). Any dissemination or use of this 
electronic mail or its contents (including any attachments) by persons other 
than the intended recipient(s) is strictly prohibited. If you have received 
this message in error, please delete the original message in its entirety 
(including any attachments) and notify us immediately by reply email so that we 
may correct our internal records.  Midland Paper Company accepts no 
responsibility for any loss or damage from use of this electronic mail, 
including any damage resulting from a computer virus.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] need advice to analysis traffic immediately

2010-12-09 Thread Deric Kwok
Hi

When the bandwidth is high / spike, how can I be easy way to identify
the traffic coming from in cisco

In linux, I can run the iftop -i int

Thank you
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] need advice to analysis traffic immediately

2010-12-09 Thread Joseph Jackson
Enable netflow on the router and export it to a collector.  

Here's a free one that's pretty.

http://www.plixer.com/



-Original Message-
From: cisco-nsp-boun...@puck.nether.net 
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Deric Kwok
Sent: Thursday, December 09, 2010 12:43 PM
To: Cisco Network Service Providers
Subject: [c-nsp] need advice to analysis traffic immediately

Hi

When the bandwidth is high / spike, how can I be easy way to identify
the traffic coming from in cisco

In linux, I can run the iftop -i int

Thank you
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] need advice to analysis traffic immediately

2010-12-09 Thread Johan Grip

I generally use top-talkers for that.

ip flow-top-talkers
 top 50
 sort-by bytes

Then put ip flow ingress/egress on interfaces as needed.


On Thu, 09 Dec 2010 19:43:03 +0100, Deric Kwok deric.kwok2...@gmail.com  
wrote:



Hi

When the bandwidth is high / spike, how can I be easy way to identify
the traffic coming from in cisco

In linux, I can run the iftop -i int

Thank you
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/