[mrtg] Re: What is the IP of generating hosts?

[Ken Jolkowski]

-----Original Message-----
>From: Jim Bennett [mailto:JBennett at sevencounties.org]
>Sent: Monday, November 03, 2003 12:03 PM
>To: mrtg at list.ee.ethz.ch
>Subject: [mrtg] What is the IP of generating hosts?
>
>
>Probably a dumb question, but I'll ask it anyway.
>
>What is the best/easiest way to determine the IP address of the host that
is generating the traffic.
>
>On a Cisco 4000 switch, MRTG graph labels it as "#3/6 - sw0 xxxx xx".  All
the ports are label in this matter, and they go as high as "#3/48 - sw0 xxxx
xx".  >We have a Fluke Optiview and it labels the ports the  same.  But I
have some reservation about the accuracy of locating the IP address using
the Fluke.  
>It appears that the IP address that the Fluke has identified to that port
does appeared to be the one that MRTG says the port is. 
>I know MRTG will identify the port as an IP address of 10.10.3.1_64.  This
means the 64th port on the switch.  Right???  
>But what physical port does that relate to on the switch?  And what is the
IP address of the host generating the traffic?
>
>Thanks for any help or insight in the matter.
>Jim


Jim,

I haven't found an easy way, but due to the fact that a switch is, for the
most part, a layer 2 device it doesn't record IP addresses.  On a Cisco
4000, as well as other Cisco switches with the CATOS image, you can do a
'show port 3/6' and it will show you the details of that port.  For Example:

Port	Security	Violation	Shutdown-Time	Age-Time
Max-Addr	Trap	IfIndex
----- -------- --------- ------------- -------- -------- -------- -------
 3/6  	disabled  	shutdown             0        	0
1 		disabled      64

The IfIndex field will be the same number that MRTG uses to identify ports.
Then to get the IP address, on the switch type the command: show cam dynamic
3/6 this will show you the layer 2 (MAC) address in the format
00-e0-29-00-ae-12 of the device in port 3/6.  Next from the router command
line you can issue the command show arp | include 00e0:2900:ae12 and get the
IP address that is associated with that MAC address.
Then you can put the IP address in the Description field of the MRTG
generated page...

Hope that helps,

Ken Jolkowski





CONFIDENTIALITY NOTICE:
This e-mail message, including any attachments, is for the sole
use of the intended recipient's) and may contain confidential and 
privileged information.  Any unauthorized review, use, disclosure 
or distribution is prohibited.  If you are not the intended recipient, 
please contact the sender immediately by reply e-mail and destroy all
copies of the original message.
<<<<guavas>>>>

--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi

--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi