wahy don� open port 9996?
Ning�n enrutador est� exportando actualmente paquetes NetFlow / sFlow a NetFlow Analyzer.
hello: pardon by my English evil. I installed the network to analyser 7, I believe that me this open port 9996 in the PC with Windows XP (firewall is deshabilitado) copy show IP cache flow, my IP addres is 10.10.7.5. Some idea?
IP packet size distribution (58803 total packets):
1-32 64 96 128 160 192 224 256 288 320 352 384 416 448 480
.007 .353 .116 .057 .034 .018 .002 .003 .000 .000 .001 .000 .000 .000 .000
512 544 576 1024 1536 2048 2560 3072 3584 4096 4608
.000 .000 .000 .006 .394 .000 .000 .000 .000 .000 .000
IP Flow Switching Cache, 278544 bytes
10 active, 4086 inactive, 2751 added
81389 ager polls, 0 flow alloc failures
Active flows timeout in 1 minutes
Inactive flows timeout in 15 seconds
IP Sub Flow Cache, 21640 bytes
13 active, 1011 inactive, 3320 added, 2751 added to flow
0 alloc failures, 0 force free
1 chunk, 0 chunks added
last clearing of statistics 03:20:04
Protocol Total Flows Packets Bytes Packets Active(Sec) Idle(Sec)
-------- Flows /Sec /Flow /Pkt /Sec /Flow /Flow
TCP-Telnet 19 0.0 71 40 0.1 25.5 11.8
TCP-WWW 16 0.0 3 44 0.0 0.9 8.3
TCP-other 167 0.0 144 694 2.0 39.4 1.4
UDP-DNS 2 0.0 2 68 0.0 0.0 15.4
UDP-other 1170 0.0 3 83 0.3 1.5 15.4
ICMP 489 0.0 1 31 0.0 0.0 15.5
IP-other 885 0.0 31 655 2.2 44.7 5.7
Total: 2748 0.2 20 611 4.7 17.6 11.4
SrcIf SrcIPaddress DstIf DstIPaddress Pr SrcP DstP Pkts
Se0/1/0.4 172.200.0.1 Null 224.0.0.10 58 0000 0000 11
Se0/1/0.2 172.16.254.5 Null 224.0.0.10 58 0000 0000 7
Se0/1/0.1 172.16.254.1 Null 224.0.0.10 58 0000 0000 7
Se0/1/0.1 10.10.2.201 Local 10.254.1.1 01 0000 0800 1
Se0/1/0.1 172.31.10.42 Local 192.168.17.126 06 0031 8857 1
Se0/1/0.1 10.10.2.201 Local 10.254.1.1 11 0409 00A1 13
Se0/1/0.1 10.10.2.201 Local 10.254.1.1 11 0408 00A1 1
Fa0/0 10.254.1.28 Se0/1/0.1 10.10.7.5 06 15FF 0AA4 323
Se0/1/0.1 10.10.7.5 Local 10.254.1.1 06 0A52 0017 50
Se0/1/0.1 172.16.254.1 Local 172.16.254.2 32 B047 C28B 620
Se0/1/0.1 10.10.7.5 Fa0/0 10.254.1.28 06 0AA4 15FF 551
Thanks
hello: pardon by my English evil. I installed the network to analyser 7, I believe that me this open port 9996 in the PC with Windows XP (firewall is deshabilitado) copy show IP cache flow, my IP addres is 10.10.7.5. Some idea?
IP packet size distribution (58803 total packets):
1-32 64 96 128 160 192 224 256 288 320 352 384 416 448 480
.007 .353 .116 .057 .034 .018 .002 .003 .000 .000 .001 .000 .000 .000 .000
512 544 576 1024 1536 2048 2560 3072 3584 4096 4608
.000 .000 .000 .006 .394 .000 .000 .000 .000 .000 .000
IP Flow Switching Cache, 278544 bytes
10 active, 4086 inactive, 2751 added
81389 ager polls, 0 flow alloc failures
Active flows timeout in 1 minutes
Inactive flows timeout in 15 seconds
IP Sub Flow Cache, 21640 bytes
13 active, 1011 inactive, 3320 added, 2751 added to flow
0 alloc failures, 0 force free
1 chunk, 0 chunks added
last clearing of statistics 03:20:04
Protocol Total Flows Packets Bytes Packets Active(Sec) Idle(Sec)
-------- Flows /Sec /Flow /Pkt /Sec /Flow /Flow
TCP-Telnet 19 0.0 71 40 0.1 25.5 11.8
TCP-WWW 16 0.0 3 44 0.0 0.9 8.3
TCP-other 167 0.0 144 694 2.0 39.4 1.4
UDP-DNS 2 0.0 2 68 0.0 0.0 15.4
UDP-other 1170 0.0 3 83 0.3 1.5 15.4
ICMP 489 0.0 1 31 0.0 0.0 15.5
IP-other 885 0.0 31 655 2.2 44.7 5.7
Total: 2748 0.2 20 611 4.7 17.6 11.4
SrcIf SrcIPaddress DstIf DstIPaddress Pr SrcP DstP Pkts
Se0/1/0.4 172.200.0.1 Null 224.0.0.10 58 0000 0000 11
Se0/1/0.2 172.16.254.5 Null 224.0.0.10 58 0000 0000 7
Se0/1/0.1 172.16.254.1 Null 224.0.0.10 58 0000 0000 7
Se0/1/0.1 10.10.2.201 Local 10.254.1.1 01 0000 0800 1
Se0/1/0.1 172.31.10.42 Local 192.168.17.126 06 0031 8857 1
Se0/1/0.1 10.10.2.201 Local 10.254.1.1 11 0409 00A1 13
Se0/1/0.1 10.10.2.201 Local 10.254.1.1 11 0408 00A1 1
Fa0/0 10.254.1.28 Se0/1/0.1 10.10.7.5 06 15FF 0AA4 323
Se0/1/0.1 10.10.7.5 Local 10.254.1.1 06 0A52 0017 50
Se0/1/0.1 172.16.254.1 Local 172.16.254.2 32 B047 C28B 620
Se0/1/0.1 10.10.7.5 Fa0/0 10.254.1.28 06 0AA4 15FF 551
Thanks