Date: Wed, 16 Jan 2002 09:55:16 -0600 (CST) From: Nick Rogness <nick@rogness.net> To: Chris Shenton <chris@shenton.org> Cc: freebsd-isp@FreeBSD.ORG Subject: Re: Who's saturating outbound link (Cisco 2620, IOS 12.1(1)) Message-ID: <Pine.BSF.4.21.0201160954460.12818-100000@cody.jharris.com> In-Reply-To: <87g05a2ao2.fsf_-_@thanatos.shenton.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On 13 Jan 2002, Chris Shenton wrote: Search cisco's site on enabling NetFlow statistics. > An ISP I support has FreeBSD servers and a bunch of LAN- and > ISDN-connected clients. Its remote so I can't get to it physically. > > In the past couple days, the 256Kbps link has been totally saturated, > MRTG tells me it's outbound traffic. How can I determine which > system is causing the traffic? > > I'm not a Cisco expert, but hoped "show ip accounting" would help, but > it only appears to show me *inbound* traffic from all outside > addresses to my internal addresses. I need the opposite. Is there > some IOS command I'm just not clued into? > > I'm working with the remote admin to see if I can get a hub put > between the router and other ISP gear, then put a FreeBSD box on that > so I can use tcpdump or others to sniff the traffic. Until then, I'm > blind unless there's some cisco voodoo I can use. > > Any ideas? Thanks. > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > Nick Rogness <nick@rogness.net> - Don't mind me...I'm just sniffing your packets To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0201160954460.12818-100000>