Avatar of cpatte7372
cpatte7372Flag for United Kingdom of Great Britain and Northern Ireland

asked on 

Cisco Interface Saturation - Top Talker Script Interpretation

Hello Community,
 
We've been experiencing high utilisation on our interface, to the point where the rx is full saturated, see below:
 
ukxxxx-rm01-xx#show int atM 0/1/0
ATM0/1/0 is up, line protocol is up
  Hardware is MPC ATMSAR, address is 6073.5cd8.95a6 (bia 6073.5cd8.95a6)
  Description: Internet Connection
  MTU 1600 bytes, sub MTU 1600, BW 448 Kbit/sec, DLY 820 usec,
     reliability 255/255, txload 137/255, rxload 255/255
 
 
I decided to apply the attached script to determine what might be causing the saturation. I have also attached an explanation of how the script works.
 
Can someone please help me interpet the output?
 
The culprit is the source ip 194.75.x.x to 80.229.x.x with prot ESP and AvgBits/s 1.19M and AVGpkt/s 175.
 
I don't know how to interpret the results...
 
Any explanation would greatly appreciated.
 
Cheers
 
Carlton
netflow-output.txt
top.txt
INSTALL.txt
README.txt
Routers

Avatar of undefined
Last Comment
cpatte7372
Avatar of giltjr
giltjr
Flag of United States of America image

ESP is typically used for VPN tunnels.  Do you have a site to site VPN tunnel?
Avatar of cpatte7372
cpatte7372
Flag of United Kingdom of Great Britain and Northern Ireland image

ASKER

Thanks for responding.

Yes we do have a VPN site to site VPN tunnel.
Avatar of cpatte7372
cpatte7372
Flag of United Kingdom of Great Britain and Northern Ireland image

ASKER

Hello Experts,

Attached are the configs for the the hub and spoke routers.

Thanks for your help.
HUB.txt
SPOKE.txt
ASKER CERTIFIED SOLUTION
Avatar of giltjr
giltjr
Flag of United States of America image

Blurred text
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
Avatar of cpatte7372
cpatte7372
Flag of United Kingdom of Great Britain and Northern Ireland image

ASKER

Cheers mate.
Routers
Routers

A router is a networking device that forwards data packets between computer networks. Routers perform the "traffic directing" functions on the Internet. The most familiar type of routers are home and small office cable or DSL routers that simply pass data, such as web pages, email, IM, and videos between computers and the Internet. More sophisticated routers, such as enterprise routers, connect large business or ISP networks up to the powerful core routers that forward data at high speed along the optical fiber lines of the Internet backbone. Though routers are typically dedicated hardware devices, use of software-based routers has grown increasingly common.

49K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
Ask the experts
Read over 600 more reviews

TRUSTED BY

IBM logoIntel logoMicrosoft logoUbisoft logoSAP logo
Qualcomm logoCitrix Systems logoWorkday logoErnst & Young logo
High performer badgeUsers love us badge
LinkedIn logoFacebook logoX logoInstagram logoTikTok logoYouTube logo