[unisog] CISCO NetFlow

Doug Payne dwpayne at ist.uwaterloo.ca
Wed Sep 17 18:31:36 GMT 2003


kamal hilmi othman wrote:

> Hi
> Just curios , does anyone knows abt this ?
> 
> SrcIf         SrcIPaddress    DstIf         DstIPaddress    Pr SrcP
> DstP  Pkts
> Se3/0.16      10.1.10.1       Fa4/0         192.168.10.1    01 0000
> 0800   650 
> 
> Pr == Protocol 
> DstP == Destination IP
> 
> as of above ;
> converting 0800 to decimal is 2048 , not as everyone in this list aware
> that icmp has a port!

08 is the ICMP Type for Echo (i.e. a ping packet). 00 would be Echo 
Reply. The 2nd octet is a Code that only has meaning for some Types, 
such as Unreachables and Redirects, etc.

10.1.10.1 has pinged 192.168.10.1 650 times.



More information about the unisog mailing list