Monitoring interfaces

[Eftodi]

How do I monitor an interface ?
I need to see what is going through the interface,
just like an "sh ip nat trans" shows i.e. I want to see
who is boosting traffic.
Is there any software (for Windows platform)?

I would appreciate your help very much.
Radu

 

[tschouten]

You could try MRTG it isn't too hard to get to run on Windows. If you feel like trying linux would suggest this tool, it rocks.

http://www.sins.com.au/nmis/

 

[dx1]

MRTG will show you how much utilization your interface is using. If you want to see what's going through the interface, you can enable "ip route-cache flow" on the interface. Wait about a min or so and then do a "show ip route cache flow" and it will show you a source/destination address and a source/destination port and packet size. The ports are in hex so you will need to use your calculator and convert them to dec.

You can also enable NBAR protocol discovery and it will show you the type of traffic going through the interface.

Make sure you have enough memory.

 

[tschouten]

Would help if I read the question correctly.

DX1 stated a good way to check the network flow through an interface.

 

[HECLSUPPORT]

dx1 I have tried show ip route cache flow command on router with ver 12.This command is not supportable on router.

Eftodi, try ip acccounting on tht particular interface.

 

[Eftodi]

Hi guys !
I have implemented MRTG on Windows: have installed ActivePerl and generated all the config files.
Then used FireDaemon to set all this like a service. And I have the graphics with load utilization.

But that wasn't what I was looking for.

I need source/addres monitoring i.e. to store in a log file or a database somehow, to be able later to build daily or monthly figures.

Yours,
Radu Eftodi