Avatar of cpatte7372
cpatte7372Flag for United Kingdom of Great Britain and Northern Ireland asked on

Cisco Interface Saturation - Top Talker Script Interpretation

Hello Community,
 
We've been experiencing high utilisation on our interface, to the point where the rx is full saturated, see below:
 
ukxxxx-rm01-xx#show int atM 0/1/0
ATM0/1/0 is up, line protocol is up
  Hardware is MPC ATMSAR, address is 6073.5cd8.95a6 (bia 6073.5cd8.95a6)
  Description: Internet Connection
  MTU 1600 bytes, sub MTU 1600, BW 448 Kbit/sec, DLY 820 usec,
     reliability 255/255, txload 137/255, rxload 255/255
 
 
I decided to apply the attached script to determine what might be causing the saturation. I have also attached an explanation of how the script works.
 
Can someone please help me interpet the output?
 
The culprit is the source ip 194.75.x.x to 80.229.x.x with prot ESP and AvgBits/s 1.19M and AVGpkt/s 175.
 
I don't know how to interpret the results...
 
Any explanation would greatly appreciated.
 
Cheers
 
Carlton
netflow-output.txt
top.txt
INSTALL.txt
README.txt
Routers

Avatar of undefined
Last Comment
cpatte7372

8/22/2022 - Mon
giltjr

ESP is typically used for VPN tunnels.  Do you have a site to site VPN tunnel?
ASKER
cpatte7372

Thanks for responding.

Yes we do have a VPN site to site VPN tunnel.
ASKER
cpatte7372

Hello Experts,

Attached are the configs for the the hub and spoke routers.

Thanks for your help.
HUB.txt
SPOKE.txt
I started with Experts Exchange in 2004 and it's been a mainstay of my professional computing life since. It helped me launch a career as a programmer / Oracle data analyst
William Peck
ASKER CERTIFIED SOLUTION
giltjr

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
ASKER
cpatte7372

Cheers mate.