Skip site navigation (1)Skip section navigation (2)
Date:      13 Jan 2002 16:39:09 -0500
From:      Chris Shenton <chris@shenton.org>
To:        freebsd-isp@freebsd.org
Subject:   Who's saturating outbound link (Cisco 2620, IOS 12.1(1))
Message-ID:  <87g05a2ao2.fsf_-_@thanatos.shenton.org>
In-Reply-To: <1241681557.20010725114735@buz.ch>

next in thread | previous in thread | raw e-mail | index | archive | help
An ISP I support has FreeBSD servers and a bunch of LAN- and
ISDN-connected clients.  Its remote so I can't get to it physically.

In the past couple days, the 256Kbps link has been totally saturated,
MRTG tells me it's outbound traffic.   How can I determine which
system is causing the traffic?

I'm not a Cisco expert, but hoped "show ip accounting" would help, but
it only appears to show me *inbound* traffic from all outside
addresses to my internal addresses.  I need the opposite.  Is there
some IOS command I'm just not clued into? 

I'm working with the remote admin to see if I can get a hub put
between the router and other ISP gear, then put a FreeBSD box on that
so I can use tcpdump or others to sniff the traffic.  Until then, I'm
blind unless there's some cisco voodoo I can use.

Any ideas? Thanks.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?87g05a2ao2.fsf_-_>