Datasheet

ManualsBrandsCisco ManualsComputer equipment1701-K9-RF - 1701 ADSL Security Access Router

261

262

263

264

265

266

267

268

269

270

Lab – Collecting and Analyzing NetFlow Data

ip flow ingress

ip flow egress

Serial0/0/1

ip flow ingress

ip flow egress

b. Issue the show ip flow export command to review the NetFlow data export information.

R2# show ip flow export

Flow export v9 is enabled for main cache

Export source and destination details :

VRF ID : Default

Destination(1) 192.168.2.3 (9996)

Version 9 flow records

388 flows exported in 63 udp datagrams

0 flows failed due to lack of export packet

0 export packets were sent up to process level

0 export packets were dropped due to no fib

0 export packets were dropped due to adjacency issues

0 export packets were dropped due to fragmentation failures

0 export packets were dropped due to encapsulation fixup failures

Part 3: Analyze NetFlow Using the CLI

In Part 3, you will generate data traffic between R1 and R3 to observe NetFlow technology.

Step 1: Generate data traffic between R1 and R3.

a. Telnet from R1 to R3 using the IP address 192.168.3.1. Enter the password cisco to enter the user

EXEC mode. Enter the password class to enable global EXEC mode. Issue the show run command to

generate some Telnet traffic. Keep your Telnet session active for now.

b. From R3, issue the ping 192.168.1.1 repeat 1000 command to ping the R1 G0/0 interface. This will

generate ICMP traffic through R2.

c. From PC-A, browse to R3 using the 192.168.3.1 IP address. Login as admin with the password cisco.

Keep the browser open after you have logged into R3.

Note: Make sure the pop-up blocker is disabled on your browser.

Step 2: Display a summary of the NetFlow accounting statistics.

On R2, issue the show ip cache flow command to display changes to the summary of NetFlow data,

including packet size distribution, IP flow information, captured protocols, and interface activity. Notice the

protocols now display in the summary data.

R2# show ip cache flow

IP packet size distribution (5727 total packets):

1-32 64 96 128 160 192 224 256 288 320 352 384 416 448 480

.000 .147 .018 .700 .000 .001 .001 .001 .001 .011 .009 .001 .002 .000 .001

512 544 576 1024 1536 2048 2560 3072 3584 4096 4608

.001 .001 .097 .000 .000 .000 .000 .000 .000 .000 .000

IP Flow Switching Cache, 278544 bytes