RE: IEWB3.0 lab 13 task 10.3 -- Netflow?? posted 12/14/2005
- Subject: RE: IEWB3.0 lab 13 task 10.3 -- Netflow??
- From: "Church, Chuck" <cchurch@xxxxxxxxxxxx>
- Date: Wed, 14 Dec 2005 11:57:02 -0600
- Content-class: urn:content-classes:message
- Thread-index: AcYA1CExodW8vFIyRd6yqcx2XKY1MAAA50iw
- Thread-topic: IEWB3.0 lab 13 task 10.3 -- Netflow??
Sure sounds like a job for NBAR...
Lead Design Engineer
CCIE #8776, MCNE, MCSE
Netco Government Services - Design & Implementation
1210 N. Parker Rd.
Greenville, SC 29609
Home office: 864-335-9473
PGP key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x4371A48D
From: nobody@xxxxxxxxxxxxxx [mailto:nobody@xxxxxxxxxxxxxx] On Behalf Of
Sent: Wednesday, December 14, 2005 12:31 PM
To: Cisco certification
Subject: IEWB3.0 lab 13 task 10.3 -- Netflow??
I'm having a doubt relatively to the interpretation of this question and
what should be its answer.
The question states:
"Your manager as expressed interest in finding out what kind of
application users on vlan X are using while at office. Configure R6 to
collect information about application traffic being sent to and received
from vlan X and store it locally.
This accounting should include both the total number of packets sent and
received as well as a 5 Minute utilization average."
According to this I see the keyword "application" meaning ports used,
therefore we are talking about flows. So, I can discard IP accounting
(that only accounts SrcIP DstIP, not full flow).
The problem is that by enabling netflow on the interface with ip flow
egress and ip flow ingress when I do sh ip cache flow I do not see the
"5minute utilization average".
Is my interpretation correct and we are talking about netflow here?
Subscription information may be found at: