RE: sho ip cache flow via SNMP?

From: Barry Raveendran Greene (bgreene@cisco.com)
Date: Fri Jun 01 2001 - 00:54:12 EDT


Not yet.

It is in the coding queue (CSCdp91364). We think it would be great for
tracking DOS/DDOS attacks through a network.

Barry

> -----Original Message-----
> From: Hank Nussbacher [mailto:hank@att.net.il]
> Sent: Thursday, May 31, 2001 10:16 PM
> To: cisco-nsp@puck.nether.net
> Subject: sho ip cache flow via SNMP?
>
>
> Are any of the following numbers available via SNMP:
>
> IP Flow Switching Cache, 6553988 bytes
> 4811 active, 60725 inactive, 719748518 added
> 1424029350 ager polls, 0 flow alloc failures
> last clearing of statistics 2w1d
> Protocol Total Flows Packets Bytes Packets
> Active(Sec) Idle(Sec)
> -------- Flows /Sec /Flow /Pkt /Sec
> /Flow /Flow
> TCP-Telnet 1222409 0.9 35 103 32.4
> 22.0 19.8
> TCP-FTP 13172393 9.9 4 137 48.5
> 4.9 18.6
> TCP-FTPD 1325621 1.0 498 799 498.8
> 63.8 15.0
> TCP-WWW 210574542 158.9 14 662 2333.5
> 6.9 16.2
> TCP-SMTP 11919940 8.9 41 355 374.6
> 10.3 15.2
> TCP-X 113012 0.0 100 387 8.5
> 19.7 18.7
> TCP-BGP 355397 0.2 4 66 1.1
> 11.0 19.6
> TCP-NNTP 380102 0.2 2878 245 825.7
> 95.4 25.0
> TCP-Frag 4143 0.0 13 159 0.0
> 10.1 21.1
> TCP-other 295997904 223.3 22 421 5086.9
> 7.5 15.7
> UDP-DNS 64023155 48.3 8 102 416.4
> 5.9 21.2
> UDP-NTP 4955600 3.7 1 75 4.1
> 0.4 20.6
> UDP-TFTP 4500 0.0 1 88 0.0
> 0.5 21.8
> UDP-Frag 16446 0.0 242 525 3.0
> 90.1 20.8
> UDP-other 90782509 68.5 7 172 511.6
> 5.4 25.1
> ICMP 24338140 18.3 8 88 154.6
> 3.8 20.9
> IGMP 33117 0.0 8 437 0.2
> 30.4 21.0
> IPINIP 8853 0.0 576 1469 3.8
> 47.9 20.5
> GRE 137544 0.1 3542 504 367.7
> 318.2 16.1
> IP-other 384401 0.2 355 526 103.1
> 72.6 19.4
> Total: 719749728 543.2 19 448 10775.3
> 7.0 17.8
>
> Thanks,
> Hank
>
>



This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:12:39 EDT