>>как выяснить от чего это? куда копать?
>sh ip cache flow на 2611
IP packet size distribution (390829841 total packets):
1-32 64 96 128 160 192 224 256 288 320 352 384 416 448 480
.000 .362 .267 .023 .012 .006 .006 .012 .006 .006 .007 .007 .005 .004 .003
512 544 576 1024 1536 2048 2560 3072 3584 4096 4608
.002 .002 .001 .014 .244 .000 .000 .000 .000 .000 .000
IP Flow Switching Cache, 278544 bytes
35 active, 4061 inactive, 29029729 added
478924511 ager polls, 0 flow alloc failures
Active flows timeout in 5 minutes
Inactive flows timeout in 15 seconds
last clearing of statistics never
Protocol Total Flows Packets Bytes Packets Active(Sec) Idle(Sec)
-------- Flows /Sec /Flow /Pkt /Sec /Flow /Flow
TCP-Telnet 1405 0.0 52 180 0.0 20.8 7.5
TCP-FTP 92087 0.0 8 58 0.1 0.9 6.1
TCP-FTPD 66777 0.0 70 921 1.1 3.6 1.6
TCP-WWW 11016966 2.5 14 654 38.3 3.1 4.2
TCP-SMTP 105502 0.0 133 914 3.2 5.8 1.7
TCP-X 79 0.0 1 40 0.0 0.0 14.6
TCP-BGP 17 0.0 1 42 0.0 0.4 9.7
TCP-NNTP 21 0.0 1 43 0.0 0.4 10.2
TCP-Frag 1 0.0 1 116 0.0 0.0 15.1
TCP-other 7952520 1.8 22 239 41.0 3.7 10.0
UDP-DNS 473560 0.1 1 74 0.1 0.8 15.4
UDP-NTP 577820 0.1 1 76 0.1 1.0 15.4
UDP-TFTP 1 0.0 1 50 0.0 0.0 15.0
UDP-Frag 7 0.0 1 101 0.0 2.7 15.3
UDP-other 7110917 1.6 3 111 5.8 6.0 15.3
ICMP 1631988 0.3 2 66 0.9 8.2 15.1
GRE 26 0.0 309 72 0.0 49.2 15.5
Total: 29029694 6.7 13 435 90.9 4.2 9.6
SrcIf SrcIPaddress DstIf DstIPaddress Pr SrcP DstP Pkts
Et0/1 192.168.1.16 Local 192.168.1.2 11 0089 0089 1
Se1/0:2 192.168.64.34 Et0/1 88.212.196.77 06 0854 0050 3
Et0/1 88.212.196.77 Se1/0:2 192.168.64.34 06 0050 0854 1
Et0/1 192.168.5.254 Se1/0:2 192.168.64.253 06 1197 0015 7
Se1/0:2 192.168.64.253 Et0/1 192.168.5.254 06 0015 1197 1
Se1/0:2 192.168.64.253 Et0/1 192.168.5.254 06 0015 1197 6
Se1/0:2 192.168.64.1 Et0/1 192.168.5.41 01 0000 0000 1
Se1/0:2 192.168.65.254 Et0/1 192.168.5.180 06 01BD 0785 1
Se1/0:2 192.168.66.12 Et0/1 195.90.180.45 06 0725 004F 4
Se1/0:2 192.168.65.254 Et0/1 192.168.5.3 11 0089 0089 1
Et0/1 62.141.82.184 Se1/0:2 192.168.66.11 06 006E 0ED9 1
Se1/0:2 192.168.66.11 Et0/1 62.141.82.184 06 0ED9 006E 2
SrcIf SrcIPaddress DstIf DstIPaddress Pr SrcP DstP Pkts
Se1/0:2 192.168.64.34 Et0/1 83.222.10.75 06 084B 0050 28
Se1/0:2 192.168.64.34 Et0/1 83.222.10.75 06 0848 0050 6
Et0/1 83.222.10.75 Se1/0:2 192.168.64.34 06 0050 0848 6
Et0/1 83.222.10.75 Se1/0:2 192.168.64.34 06 0050 084B 24
Se1/0:2 192.168.64.79 Et0/1 192.168.5.18 06 0B2D 0050 6
Se1/0:2 192.168.64.47 Local 192.168.1.2 01 0000 0800 248
Et0/1 192.168.5.12 Local 192.168.1.2 06 0A31 0017 19
Et0/1 192.168.5.18 Se1/0:2 192.168.64.79 06 0050 0B3F 2
Se1/0:2 192.168.64.79 Et0/1 192.168.5.18 06 0B3B 0050 10
Se1/0:2 192.168.64.79 Et0/1 192.168.5.18 06 0B3F 0050 5
Se1/0:2 192.168.64.79 Et0/1 192.168.5.18 06 0B30 0050 6
Se1/0:2 192.168.64.79 Et0/1 192.168.5.18 06 0B48 0050 4
Se1/0:2 192.168.64.79 Et0/1 192.168.5.18 06 0B4B 0050 4
Et0/1 192.168.5.18 Se1/0:2 192.168.64.79 06 0050 0B48 1
Se1/0:2 192.168.65.253 Et0/1 192.168.5.55 06 1323 0ABD 816
Et0/1 192.168.5.55 Se1/0:2 192.168.65.253 06 0ABD 1323 22
Et0/1 192.168.5.21 Local 192.168.1.2 01 0000 0800 2
Se1/0:2 192.168.64.47 Et0/1 64.12.26.132 06 0566 1446 1
Et0/1 64.12.26.132 Se1/0:2 192.168.64.47 06 1446 0566 1
Se1/0:2 192.168.65.159 Et0/1 192.168.5.18 06 0CC3 0050 1
Et0/1 192.168.5.18 Se1/0:2 192.168.65.159 06 0050 0CC3 2
Et0/1 192.168.5.18 Se1/0:2 192.168.65.159 06 0050 0CF6 1
Se1/0:2 192.168.65.159 Et0/1 192.168.5.18 06 0CF6 0050 1
Se1/0:2 192.168.66.11 Et0/1 195.90.180.45 06 0DDA 004F 3
Se1/0:2 192.168.65.125 Et0/1 192.168.5.18 06 0C76 0050 34
Se1/0:2 192.168.65.125 Et0/1 192.168.5.18 06 0C84 0050 4
Se1/0:2 192.168.64.120 Et0/1 62.141.82.184 06 056C 006E 212
Et0/1 62.141.82.184 Se1/0:2 192.168.64.120 06 006E 056C 20
