• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 265
  • Last Modified:

With several sites on MPLS and Cisco Routers wondering how to view top protocol/talker

Hello EE,

We manage our own routers: Cisco 2921
Some sites have excessive usage and are requesting bandwidth but for the number of users I'd prefer to check what is using up the bandwidth at these couple sites before hand.  Our vendor doesn't do any network monitoring (ISP) and we don't currently have Netflow setup or a server to monitor.  I'm wondering if there are commands I could go in and see what:1. top protocol used  2. top send/receive IP.

1 Solution
Ned RamsayNetwork Operations ManagerCommented:
The Cisco NBAR system is your best bet:
If your release of IOS supports NBAR, simply add the 'ip nbar protocol-discovery' configuration command to the interface that your users are using as their default gateway.

For example:

ROUTER1#config t
Enter configuration commands, one per line. End with CNTL/Z.
ROUTER1(config)#interface FastEthernet0/0
ROUTER1(config-if)#ip nbar protocol-discovery
Building configuration...

Once NBAR is gathering data, you can use the 'show ip nbar resources' command to see how much memory it's taking up. As long as the numbers are acceptable, you can leave NBAR protocol discovery running as long as you like.

To see the really interesting information, issue 'show ip nbar protocol-discover' and look at all the protocols flowing to (and perhaps through) your router.

To limit outputs use the following: show ip nbar protocol-discovery top-n X (where X is the number of protocols you wish to monitor).

You can then apply this to other interfaces if need be to drill down.

Cisco routers support net flow configuration. Please check below link. Flow top talkers may help you also to see who is making traffic more than others.



Router# show ip flow top-talkers
SrcIf         SrcIPaddress    DstIf         DstIPaddress    Pr SrcP DstP Bytes
Et3/0        Local        01 0000 0000  4800
Et3/0        Local        01 0000 0000  4800
Et3/0        Local        01 0000 0000   800
3 of 10 top talkers shown. 3 flows processed.
operationsITAuthor Commented:
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

The 14th Annual Expert Award Winners

The results are in! Meet the top members of our 2017 Expert Awards. Congratulations to all who qualified!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now