GroupStudy.com GroupStudy.com - A virtual community of network engineers
 Home  BookStore  StudyNotes  Links  Archives  StudyRooms  HelpWanted  Discounts  Login
RE: IEWB3.0 lab 13 task 10.3 -- Netflow?? posted 12/14/2005
[Chronological Index] [Thread Index] [Top] [Date Prev][Date Next] [Thread Prev][Thread Next]


Sure sounds like a job for NBAR... 


Chuck Church
Lead Design Engineer
CCIE #8776, MCNE, MCSE
Netco Government Services - Design & Implementation
1210 N. Parker Rd.
Greenville, SC 29609
Home office: 864-335-9473
Cell: 703-819-3495
cchurch@xxxxxxxxxxxx
PGP key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x4371A48D


-----Original Message-----
From: nobody@xxxxxxxxxxxxxx [mailto:nobody@xxxxxxxxxxxxxx] On Behalf Of
Gustavo Novais
Sent: Wednesday, December 14, 2005 12:31 PM
To: Cisco certification 
Subject: IEWB3.0 lab 13 task 10.3 -- Netflow??

Hello



I'm having a doubt relatively to the interpretation of this question and
what should be its answer.



The question states:



"Your manager as expressed interest in finding out what kind of
application users on vlan X are using while at office. Configure R6 to
collect information about application traffic being sent to and received
from vlan X and store it locally.

This accounting should include both the total number of packets sent and
received as well as a 5 Minute utilization average."



According to this I see the keyword "application"  meaning ports used,
therefore we are talking about flows. So, I can discard IP accounting
(that only accounts SrcIP DstIP, not  full flow).



The problem is that by enabling netflow on the interface with ip flow
egress and ip flow ingress when I do sh ip cache flow I do not see the
"5minute utilization average".



Is my interpretation correct and we are talking about netflow here?



TIA



Gustavo Novais

_______________________________________________________________________
Subscription information may be found at: 
http://www.groupstudy.com/list/CCIELab.html