The OpenNET Project / Index page

[ новости /+++ | форум | теги | ]

форумы  помощь  поиск  регистрация  майллист  ВХОД  слежка  RSS
"Очень много неопределённого трафика"
Вариант для распечатки  
Пред. тема | След. тема 
Форумы Маршрутизаторы CISCO и др. оборудование. (Public)
Изначальное сообщение [Проследить за развитием треда]

"Очень много неопределённого трафика"  
Сообщение от umca (ok) on 12-Фев-07, 15:01 
Оборудование : CISCO 3725 + БИЛЛИНГ utm5(по netflow)
Я столкнулся с такой проблемой ОЧЕНЬ МНОГО У МЕНЯ НЕОПРЕДЕЛЁННОГО ТРАФИКА , то есть

есть на cisco 1 IP под NAT 80.254.118.ххх  , есть так же DNS server 80.254.111.254
так вот бывает такое направление трафика В БИЛЛИНГЕ МНЕ ПОКАЗУЕТ :

может ли быть такое
80.254.118.ххх--> 80.254.111.254

а это ещё странней и хуже
192.168.8.55(это внутренний IP)---->80.80.87.67 (это сайт ) -тоесть пользователь просто вышел на сайт
80.80.87.67--->192.168.8.55 -это ответ пришёл  так и работает , но бывает заходиш на ТОТ ЖЕ сайт и
192.168.8.55-->80.80.87.67 (это out)
80.80.87.67--->80.254.118.ххх (это должен быть in) - и это самое странное , токое ощущение ,что то с натом , это в биллинге явл. неопределённым трафиком и его до 100-150 мб в месяц

если нужен сонфиг:


!
! Last configuration change at 15:35:01 Kamensk Wed Feb 7 2007 by umca
! NVRAM config last updated at 15:37:21 Kamensk Wed Feb 7 2007 by umca
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname cisco3725
!
boot-start-marker
boot-end-marker
!
card type e1 2
logging buffered 51200 warnings
no logging console
enable secret 5 $1$MQBj$00wIeDwWJ3REK3B1euW/z0
enable password 7 060506324F41
!
clock timezone Kamensk 4
modem country mica e1-default
aaa new-model
!
!
aaa authentication password-prompt password:
aaa authentication username-prompt login:
aaa authentication login default local
aaa authentication ppp default group radius
aaa authorization exec default group radius
aaa accounting update periodic 1
aaa accounting network default start-stop group radius
aaa session-id common
ip subnet-zero
ip cef
!
!
!
ip domain name yourdomain.com
ip host stat.ru 192.168.0.99
ip name-server 80.254.111.254
async-bootp dns-server 80.254.111.254
isdn switch-type primary-net5
!
username all
username ххх privilege 15 password 0 01061982
username ххх privilege 15 secret 5 $1$bo/o$XT0LRXNR54B.f4zgxmzp6.
!
!
controller E1 2/0
framing NO-CRC4
pri-group timeslots 1-31
!
!
interface Loopback0
ip address 192.168.101.1 255.255.255.0
ip route-cache policy
ip route-cache flow
!
interface FastEthernet0/0
description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-FastEthernet 0/0$
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.1
description Local
encapsulation dot1Q 1 native
ip address 192.168.0.16 255.255.255.0
ip nat inside
ip flow ingress
!
interface FastEthernet0/0.22
description Office
encapsulation dot1Q 22
ip address 192.168.8.99 255.255.255.0
ip nat inside
ip flow ingress
!
interface FastEthernet0/0.31
description Donpac
bandwidth 2048
encapsulation dot1Q 31
ip address 80.254.118.154 255.255.255.252
ip access-group inside in
ip nat outside
ip flow ingress
rate-limit input 2048000 384000 384000 conform-action transmit exceed-action drop
rate-limit input access-group 2 2048000 2700 2700 conform-action transmit exceed-action drop
rate-limit output 2048000 384000 384000 conform-action transmit exceed-action drop
ip policy route-map MAP
!

interface Group-Async1
ip unnumbered FastEthernet0/0.1
ip nat inside
encapsulation ppp
dialer in-band
dialer idle-timeout 600
dialer-group 1
async dynamic routing
async mode interactive
peer default ip address pool dialin
ppp authentication chap
group-range 33 62
!
ip local pool dialin 192.168.100.1 192.168.100.32
ip nat translation timeout 300
ip nat translation tcp-timeout 600
ip nat translation icmp-timeout 300
ip nat pool Inet 80.254.118.154 80.254.118.ххх netmask 255.255.255.252
ip nat inside source list 1 pool Inet overload
ip nat inside source list 2 pool Inet overload
ip nat inside source list 3 pool Inet overload
ip nat inside source list 4 pool Inet overload
ip classless
ip route 0.0.0.0 0.0.0.0 80.254.118.ххх
ip flow-export version 5
ip flow-export destination 192.168.ххх.ххх 9996
no ip http server
ip http access-class 23
ip http authentication local
ip http timeout-policy idle 60 life 86400 requests 10000
!
access-list 1 permit 192.168.8.55
access-list 2 permit 192.168.100.0 0.0.0.255
access-list 3 permit 192.168.ххх.ххх 0.0.0.255
access-list 4 permit 10.10.10.0 0.0.0.255
access-list 101 permit ip any 192.168.8.0 0.0.0.255
access-list 101 permit ip any 192.168.100.0 0.0.0.255
access-list 101 permit ip any 10.10.10.0 0.0.0.255
access-list 101 permit ip any 192.168.ххх.ххх 0.0.0.255
dialer-list 1 protocol ip permit
route-map MAP permit 10
match ip address 101
set interface Loopback0
!
radius-server host 192.168.0.99 auth-port 1812 acct-port 1813
radius-server key mysecret
banner login  

Высказать мнение | Ответить | Правка | Наверх | Cообщить модератору

 Оглавление

Сообщения по теме [Сортировка по времени, UBB]


1. "Очень много неопределённого трафика"  
Сообщение от umca (ok) on 12-Фев-07, 15:28 
вот что выводит у меня при командах sh ip cache and sh ip nat trans


IP routing cache 8 entries, 1592 bytes
   1515 adds, 1507 invalidates, 0 refcounts
Minimum invalidation interval 2 seconds, maximum interval 5 seconds,
   quiet interval 3 seconds, threshold 0 requests
Invalidation rate 0 in last second, 0 in last 3 seconds
Last full cache invalidation occurred 3d22h ago

Prefix/Length           Age       Interface       Next Hop
80.254.111.252/30       00:15:38  Fa0/0.31        80.254.118.153
81.0.0.0/8              00:42:58  Fa0/0.31        80.254.118.153
82.0.0.0/8              00:15:32  Fa0/0.31        80.254.118.153
194.67.23.0/24          00:13:55  Fa0/0.31        80.254.118.153
194.67.45.0/24          00:15:38  Fa0/0.31        80.254.118.153
213.59.0.0/24           00:00:49  Fa0/0.31        80.254.118.153
217.16.31.0/24          00:00:48  Fa0/0.31        80.254.118.153
217.174.104.0/24        00:42:52  Fa0/0.31        80.254.118.153

cisco3725#sh ip cach        ow ip cache flow
IP packet size distribution (1870890 total packets):
   1-32   64   96  128  160  192  224  256  288  320  352  384  416  448  480
   .061 .349 .066 .021 .003 .004 .007 .008 .007 .001 .001 .001 .001 .000 .000

    512  544  576 1024 1536 2048 2560 3072 3584 4096 4608
   .000 .000 .000 .002 .458 .000 .000 .000 .000 .000 .000

IP Flow Switching Cache, 278544 bytes
  3 active, 4093 inactive, 43981 added
  914412 ager polls, 0 flow alloc failures
  Active flows timeout in 30 minutes
  Inactive flows timeout in 15 seconds
IP Sub Flow Cache, 17032 bytes
  3 active, 1021 inactive, 34972 added, 34972 added to flow
  0 alloc failures, 0 force free
  1 chunk, 1 chunk added
  last clearing of statistics never
Protocol         Total    Flows   Packets Bytes  Packets Active(Sec) Idle(Sec)
--------         Flows     /Sec     /Flow  /Pkt     /Sec     /Flow     /Flow
TCP-Telnet          52      0.0        43    47      0.0      18.5       6.6
TCP-FTP             64      0.0        86    46      0.0       8.8       6.7
TCP-FTPD           155      0.0         7   687      0.0       1.0       5.9
TCP-WWW          16348      0.0         5   526      0.2       1.1       7.2
--More--                           TCP-SMTP            38      0.0        31   438      0.0       2.2       8.2
TCP-X                4      0.0         1    40      0.0       0.0      15.4
TCP-other         6545      0.0       213   906      4.1      13.8      12.7
UDP-DNS            745      0.0         2    62      0.0       4.0      15.5
UDP-NTP            576      0.0         1    76      0.0       0.0      15.8
UDP-other        13919      0.0         8    87      0.3       8.3      15.4
ICMP               817      0.0       260    42      0.6      40.8      15.1
GRE                346      0.0        78   107      0.0      36.4      15.4
Total:           39609      0.1        47   717      5.4       6.9      11.5

SrcIf         SrcIPaddress    DstIf         DstIPaddress    Pr SrcP DstP  Pkts
Fa0/0.22      192.168.8.10    Null          192.168.8.255   11 0089 0089     1
Fa0/0.22      192.168.8.15    Null          192.168.8.255   11 0089 0089   188
Fa0/0.31      80.254.102.177  Local         80.254.118.154  06 0F2E 01BD     2
cisco3725#  show ip cache flow
IP packet size distribution (1871559 total packets):
   1-32   64   96  128  160  192  224  256  288  320  352  384  416  448  480
   .061 .349 .066 .021 .003 .004 .007 .008 .007 .001 .001 .001 .001 .000 .000

    512  544  576 1024 1536 2048 2560 3072 3584 4096 4608
   .000 .000 .000 .002 .458 .000 .000 .000 .000 .000 .000

IP Flow Switching Cache, 278544 bytes
  70 active, 4026 inactive, 44123 added
  914897 ager polls, 0 flow alloc failures
  Active flows timeout in 30 minutes
  Inactive flows timeout in 15 seconds
IP Sub Flow Cache, 17032 bytes
  27 active, 997 inactive, 35069 added, 35069 added to flow
  0 alloc failures, 0 force free
  1 chunk, 1 chunk added
  last clearing of statistics never
Protocol         Total    Flows   Packets Bytes  Packets Active(Sec) Idle(Sec)
--------         Flows     /Sec     /Flow  /Pkt     /Sec     /Flow     /Flow
TCP-Telnet          52      0.0        43    47      0.0      18.5       6.6
TCP-FTP             64      0.0        86    46      0.0       8.8       6.7
TCP-FTPD           155      0.0         7   687      0.0       1.0       5.9
TCP-WWW          16425      0.0         5   526      0.2       1.1       7.2
--More--                           TCP-SMTP            38      0.0        31   438      0.0       2.2       8.2
TCP-X                4      0.0         1    40      0.0       0.0      15.4
TCP-other         6546      0.0       213   906      4.1      13.8      12.7
UDP-DNS            745      0.0         2    62      0.0       4.0      15.5
UDP-NTP            576      0.0         1    76      0.0       0.0      15.8
UDP-other        13920      0.0         8    87      0.3       8.3      15.4
ICMP               817      0.0       260    42      0.6      40.8      15.1
GRE                346      0.0        78   107      0.0      36.4      15.4
Total:           39688      0.1        47   717      5.4       6.9      11.5

SrcIf         SrcIPaddress    DstIf         DstIPaddress    Pr SrcP DstP  Pkts
Fa0/0.31      80.254.111.254  Local         80.254.118.154  11 0035 0404     1
Fa0/0.22      192.168.8.11    Null          192.168.8.255   11 0089 0089     6
Fa0/0.22      192.168.8.10    Null          192.168.8.255   11 0089 0089     1
Fa0/0.22      192.168.8.15    Null          192.168.8.255   11 0089 0089   222
Fa0/0.22      192.168.8.55    Null          80.254.111.254  11 0404 0035     1
Fa0/0.31      216.239.59.103  Local         80.254.118.154  06 0050 0565     1
Fa0/0.22      192.168.8.55    Fa0/0.31      88.212.196.77   06 0577 0050     5
Fa0/0.31      88.212.196.77   Null          192.168.8.55    06 0050 0577     4
Fa0/0.22      192.168.8.55    Null          216.239.59.103  06 056B 0050     1
Fa0/0.22      192.168.8.55    Null          216.239.59.103  06 056D 0050     1
Fa0/0.22      192.168.8.55    Fa0/0.31      216.239.59.103  06 0565 0050     5
Fa0/0.22      192.168.8.55    Fa0/0.31      217.174.104.174 06 0523 0050     6
--More--                          
SrcIf         SrcIPaddress    DstIf         DstIPaddress    Pr SrcP DstP  Pkts
Fa0/0.22      192.168.8.55    Fa0/0.31      217.174.104.174 06 053B 0050     4
Fa0/0.22      192.168.8.55    Fa0/0.31      217.174.104.174 06 0560 0050     6
Fa0/0.22      192.168.8.55    Fa0/0.31      217.174.104.174 06 0579 0050     3
Fa0/0.22      192.168.8.55    Fa0/0.31      217.174.104.174 06 057C 0050     5
Fa0/0.22      192.168.8.55    Fa0/0.31      217.174.104.174 06 057E 0050     5
Fa0/0.22      192.168.8.55    Fa0/0.31      217.174.104.174 06 057F 0050     6
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0583     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0581     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0585     4
Fa0/0.31      216.239.59.147  Null          192.168.8.55    06 0050 0537     3
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0523     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0521     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0520     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0527     3
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0525     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 052A     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 052D     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 052C     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0531     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 053B     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0539     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 053F     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 053D     4
--More--                          
SrcIf         SrcIPaddress    DstIf         DstIPaddress    Pr SrcP DstP  Pkts
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0501     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0506     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0504     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0509     3
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0508     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 050F     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 050E     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 050C     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0513     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0511     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0517     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0515     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 051B     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 051A     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 051F     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0561     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0560     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0567     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0564     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0569     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 056F     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0573     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0571     4
--More--                          
SrcIf         SrcIPaddress    DstIf         DstIPaddress    Pr SrcP DstP  Pkts
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0575     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0579     3
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 057F     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 057E     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 057C     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0543     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0541     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0547     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0545     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 054B     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 054A     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 054F     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 054D     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0552     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0557     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0555     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0554     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 055B     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 0559     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 055E     4
Fa0/0.31      89.108.91.162   Null          192.168.8.55    06 0050 0535     4
Fa0/0.31      89.108.91.162   Null          192.168.8.55    06 0050 052F     4
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 04EB   102
--More--                          
SrcIf         SrcIPaddress    DstIf         DstIPaddress    Pr SrcP DstP  Pkts
Fa0/0.31      217.174.104.174 Null          192.168.8.55    06 0050 04F3     4
Fa0/0.31      216.239.59.103  Null          192.168.8.55    06 0050 0565     3
Fa0/0.31      216.239.59.103  Null          192.168.8.55    06 0050 056B    12
Fa0/0.31      216.239.59.103  Null          192.168.8.55    06 0050 056D     5
Fa0/0.31      216.239.59.103  Null          192.168.8.55    06 0050 0589     7
cisco3725#sh ip nat tr
cisco3725#sh ip nat translations
Pro Inside global      Inside local       Outside local      Outside global
tcp 80.254.118.154:1335 192.168.8.55:1335 216.239.59.147:80  216.239.59.147:80
tcp 80.254.118.154:1381 192.168.8.55:1381 216.239.59.103:80  216.239.59.103:80
tcp 80.254.118.154:1387 192.168.8.55:1387 216.239.59.103:80  216.239.59.103:80
tcp 80.254.118.154:1389 192.168.8.55:1389 216.239.59.103:80  216.239.59.103:80
tcp 80.254.118.154:1417 192.168.8.55:1417 216.239.59.103:80  216.239.59.103:80
tcp 80.254.118.154:4121 192.168.8.55:4121 64.12.24.125:443   64.12.24.125:443
tcp 80.254.118.154:1327 192.168.8.55:1327 89.108.91.162:80   89.108.91.162:80
tcp 80.254.118.154:1333 192.168.8.55:1333 89.108.91.162:80   89.108.91.162:80
tcp 80.254.118.154:1399 192.168.8.55:1399 88.212.196.77:80   88.212.196.77:80
tcp 80.254.118.154:1251 192.168.8.55:1251 213.59.0.226:80    213.59.0.226:80
udp 80.254.118.154:1028 192.168.8.55:1028 80.254.111.254:53  80.254.111.254:53
tcp 80.254.118.154:1253 192.168.8.55:1253 217.16.31.122:80   217.16.31.122:80
tcp 80.254.118.154:1255 192.168.8.55:1255 217.16.31.122:80   217.16.31.122:80
tcp 80.254.118.154:1259 192.168.8.55:1259 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1261 192.168.8.55:1261 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1263 192.168.8.55:1263 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1267 192.168.8.55:1267 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1269 192.168.8.55:1269 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1271 192.168.8.55:1271 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1273 192.168.8.55:1273 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1275 192.168.8.55:1275 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1277 192.168.8.55:1277 217.174.104.174:80 217.174.104.174:80
--More--                           tcp 80.254.118.154:1279 192.168.8.55:1279 217.174.104.174:80 217.174.104.174:80
--More--                           Pro Inside global      Inside local       Outside local      Outside global
tcp 80.254.118.154:1281 192.168.8.55:1281 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1284 192.168.8.55:1284 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1286 192.168.8.55:1286 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1288 192.168.8.55:1288 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1289 192.168.8.55:1289 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1292 192.168.8.55:1292 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1294 192.168.8.55:1294 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1295 192.168.8.55:1295 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1297 192.168.8.55:1297 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1299 192.168.8.55:1299 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1301 192.168.8.55:1301 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1303 192.168.8.55:1303 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1306 192.168.8.55:1306 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1307 192.168.8.55:1307 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1311 192.168.8.55:1311 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1312 192.168.8.55:1312 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1313 192.168.8.55:1313 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1315 192.168.8.55:1315 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1317 192.168.8.55:1317 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1319 192.168.8.55:1319 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1322 192.168.8.55:1322 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1324 192.168.8.55:1324 217.174.104.174:80 217.174.104.174:80
--More--                           Pro Inside global      Inside local       Outside local      Outside global
tcp 80.254.118.154:1325 192.168.8.55:1325 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1329 192.168.8.55:1329 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1337 192.168.8.55:1337 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1339 192.168.8.55:1339 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1341 192.168.8.55:1341 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1343 192.168.8.55:1343 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1345 192.168.8.55:1345 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1347 192.168.8.55:1347 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1349 192.168.8.55:1349 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1351 192.168.8.55:1351 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1354 192.168.8.55:1354 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1355 192.168.8.55:1355 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1357 192.168.8.55:1357 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1359 192.168.8.55:1359 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1362 192.168.8.55:1362 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1364 192.168.8.55:1364 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1365 192.168.8.55:1365 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1367 192.168.8.55:1367 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1369 192.168.8.55:1369 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1371 192.168.8.55:1371 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1374 192.168.8.55:1374 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1376 192.168.8.55:1376 217.174.104.174:80 217.174.104.174:80
--More--                           Pro Inside global      Inside local       Outside local      Outside global
tcp 80.254.118.154:1377 192.168.8.55:1377 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1380 192.168.8.55:1380 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1383 192.168.8.55:1383 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1385 192.168.8.55:1385 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1391 192.168.8.55:1391 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1393 192.168.8.55:1393 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1395 192.168.8.55:1395 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1397 192.168.8.55:1397 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1401 192.168.8.55:1401 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1404 192.168.8.55:1404 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1406 192.168.8.55:1406 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1407 192.168.8.55:1407 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1409 192.168.8.55:1409 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1411 192.168.8.55:1411 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1413 192.168.8.55:1413 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1415 192.168.8.55:1415 217.174.104.174:80 217.174.104.174:80
tcp 80.254.118.154:1421 192.168.8.55

Высказать мнение | Ответить | Правка | Наверх | Cообщить модератору

2. "Очень много неопределённого трафика"  
Сообщение от ilya email(ok) on 13-Фев-07, 08:54 
да.
80.254.118.ххх--> 80.254.111.254
такое может быть
циска в нетфлоу отдает пакет который снимает с внешнего интерфейса.
а там она видит только ответ внешнего сервера на ваш внешний адрес, в который идет НАТ.

для решения данной проблемы и учета трафика по внутренним адресам нужна на внутреннем интерфейсе сделать ip flow egress (есть в версии начиная с 12.4 помойму или с 12.3Т - фьюченавигатор вам поможет).

Высказать мнение | Ответить | Правка | Наверх | Cообщить модератору

Архив | Удалить

Индекс форумов | Темы | Пред. тема | След. тема
Оцените тред (1=ужас, 5=супер)? [ 1 | 2 | 3 | 4 | 5 ] [Рекомендовать для помещения в FAQ]




Партнёры:
PostgresPro
Inferno Solutions
Hosting by Hoster.ru
Хостинг:

Закладки на сайте
Проследить за страницей
Created 1996-2025 by Maxim Chirkov
Добавить, Поддержать, Вебмастеру