With several sites on MPLS and Cisco Routers wondering how to view top protocol/talker

Hello EE,

We manage our own routers: Cisco 2921
Some sites have excessive usage and are requesting bandwidth but for the number of users I'd prefer to check what is using up the bandwidth at these couple sites before hand.  Our vendor doesn't do any network monitoring (ISP) and we don't currently have Netflow setup or a server to monitor.  I'm wondering if there are commands I could go in and see what:1. top protocol used  2. top send/receive IP.

Thanks
operationsITAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Ned RamsayNetwork Operations ManagerCommented:
The Cisco NBAR system is your best bet:
If your release of IOS supports NBAR, simply add the 'ip nbar protocol-discovery' configuration command to the interface that your users are using as their default gateway.

For example:

ROUTER1#config t
Enter configuration commands, one per line. End with CNTL/Z.
ROUTER1(config)#interface FastEthernet0/0
ROUTER1(config-if)#ip nbar protocol-discovery
ROUTER1(config-if)#^Z
ROUTER1#wr
Building configuration...
[OK]

Once NBAR is gathering data, you can use the 'show ip nbar resources' command to see how much memory it's taking up. As long as the numbers are acceptable, you can leave NBAR protocol discovery running as long as you like.

To see the really interesting information, issue 'show ip nbar protocol-discover' and look at all the protocols flowing to (and perhaps through) your router.

To limit outputs use the following: show ip nbar protocol-discovery top-n X (where X is the number of protocols you wish to monitor).

You can then apply this to other interfaces if need be to drill down.
0
askincakirCommented:
Hi,

Cisco routers support net flow configuration. Please check below link. Flow top talkers may help you also to see who is making traffic more than others.

Br,
http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/netflow/configuration/12-4t/nf-12-4t-book/cfg-nflow-top-talk.html#GUID-824723EE-2551-4D64-9E0B-F5DF065C83B9

Example:

Router# show ip flow top-talkers
SrcIf         SrcIPaddress    DstIf         DstIPaddress    Pr SrcP DstP Bytes
Et3/0         10.1.1.3        Local         10.1.1.2        01 0000 0000  4800
Et3/0         10.1.1.4        Local         10.1.1.2        01 0000 0000  4800
Et3/0         10.1.1.5        Local         10.1.1.2        01 0000 0000   800
3 of 10 top talkers shown. 3 flows processed.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
operationsITAuthor Commented:
Great!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Routers

From novice to tech pro — start learning today.