ASA Command check bandwith use.

I am using a 5505 and I want to know if exist a command to show me how much bandwith is using each ip address.
or something similar. Sometimes the network works really slow. So I want to see if someone is using to much Bandwith.

Hello,
There are no commands on the ASA to see this information, you can see the amount of connections per IP but not the
bandwith usage.
You can use NetFlow for this purpose.
Regards,
Felipe.
Remember to rate useful posts.

Similar Messages

What command would you use to check for allocation, structural, or logical integrity problems?

What command would you use to check for allocation, structural, or logical integrity problems?

Wondering if you are looking for DBCC CHECKDB command? For more information, on that command, try to look at this:
http://technet.microsoft.com/en-us/library/ms176064.aspx

ASA 5505 -Can I use outside dynamic IP for webserver DMZ?

SETUP
ASA 5505
ASA Version 9.1(2)
ASDM Version 7.1(3)
I have basic license, using only three vlans (outside, inside, DMZ).
QUESTION:
I want to find a way (if possible) to use the single DYNAMIC IP (dhcp'd from ISP) on the "outside" interface, as a means to setup a web-server on the DMZ? I just want to allow my WHS-2011 (server) to talk to microsoft's free DDNS service where my domain name is hosted (ports 80,443,4125).
So far, every setup option I have tried does not make it past the implicit deny acl's (on the outside interface) to the web-server (DMZ).
I understand that the VLAN1 (inside) had to be disabled. I understand that objects now replace some of the older NAT'd components.
CONFIG:
object network webserver-external-ip
host <X.X.X.X>
! I had set this to match my ISP DHCP address
object network webserver
host 172.16.0.2
nat (DMZ,outside) static webserver-external-ip service tcp www www
nat (DMZ,outside) static webserver-external-ip service tcp 443 443
nat (DMZ,outside) static webserver-external-ip service tcp 4125 4125
access-list outside_acl extended permit tcp any object webserver eq www
access-list outside_acl_https extended permit tcp any object webserver eq 443
access-list outside_acl_rww extended permit tcp any object webserver eq 4125
access-group outside_acl in interface outside
access-group outside_acl_https in interface outside
access-group outside_acl_rww in interface outside
! added the dns statements below because the cisco doc (below) says it's required or dmz traffic can't get out despite default rule allowing it to do so.
! (ctrl-F) ... "all traffic would be blocked from the dmz to hosts on the internet"
! http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080bf150c.shtml
object network dns-server
host 8.8.8.8
exit
access-list dmz_acl extended permit udp any object dns-server eq domain
access-list dmz_acl extended permit ip any any
access-group dmz_acl in interface DMZ
SUMMARY:
I just want to allow my WHS-2011 (server) to talk to microsoft's free DDNS service where my domain name is hosted (ports 80,443,4125).
I want to find a way (if possible) to use the single DYNAMIC IP (dhcp'd from ISP) on the "outside" interface, as a means to setup a web-server on the DMZ?
Other:
As an interim alternative, I have been able to setup & connect to the ASA using clientless vpn (web-ssl), and from there getting over to my WHS2011 server...-but the problem is, I have no way of knowing, or updating my DDNS once that IP changes since the ASA keeps blocking the return traffic to theh outside interface. My only assumption is that becasue I am using a single dynamic IP (outside interface) that it has nothing to re-direct the traffic to....???
Thank You for any help you can provide!!
k/r

Hi,
I cant really help with the DDNS portion but I would imagine you already have that sorted out.
The ASA configurations however seem a bit off to me.
Here is what you should configure
STATIC PAT TO HOST SERVICES
There are some changes that need to be done to both ACL and NAT configurations. First of the NAT configurations for each port require their own "object network" to be configured.
Also since you are using a DHCP address from the ISP to act as the NAT address then you can use the keyword/parameter "interface" in the actual "nat" command. This basically tells the ASA that it should use whatever IP address is currently on the "outside" interface of the ASA. So you wont have to configure any separate "object network" for the public IP address every time it changes.
Also, with regards to the ACL configurations. You should only configure one ACL per interface in the "in" direction. So all the rules you need to configure for traffic inbound from the Internet need to be in the same ACL that you then attach to the "outside" interface with the command "access-group"
object network WEBSERVER-TCP80
host 172.16.0.2
nat (DMZ,outside) static interface service tcp www www
object network WEBSERVER-TCP443
host 172.16.0.2
nat (DMZ,outside) static interface service tcp 443 443
object network WEBSERVER-TCP4125
host 172.16.0.2
nat (DMZ,outside) static interface service tcp 4125 4125
access-list outside_acl extended permit tcp any object WEBSERVER-TCP80 eq www
access-list outside_acl extended permit tcp any object WEBSERVER-TCP443 eq https
access-list outside_acl extended permit tcp any object WEBSERVER-TCP4125 eq 4125
access-group outside_acl in interface outside
DYNAMIC PAT FOR LANs and DMZs
The above NAT configurations only handles the NAT for situations where the remote hosts on the Internet contact your DMZ server.
If you want to configure Dynamic PAT for all your LAN and DMZ users which basically enable them to use the "outside" interface public IP address for Internet traffic, then you could configure this single "nat" configuration
nat (any,outside) after-auto source dynamic any interface
This would enable Dynamic PAT for all users behind the ASA
I am not sure if you will run into problems since you are using a single public IP address and trying to forward TCP/443. This port is both used for SSL VPN and ASDM management of the ASA.
If you want to change the default port of the ASDM management you can use this command
http server enable
If you want to change the default port of SSL VPN you can use these commands
webvpn
port
Naturally before doing either of the above changes, make sure that you are not relying to them for management purposes if something was to go wrong. If you have SSH management access to the ASA then it should naturally be ok.
I am not sure if all of the above are enough to get your setup working but it should be the basics. Naturally if there is still problems after the above suggestions it might be helpfull to see the current ASA configurations. For example NAT might not work if the ordering of NAT rules is wrong even though the actual configurations are otherwise valid.
Hope this helps
Please do remember to mark a reply as the correct answer if it answered your question.
Feel free to ask more if needed
- Jouni

How are Windows Server Backup and Command Line Tools used in vCSHB installation?

How are Windows Server Backup and Command Line Tools used during the installation of vCSHB? Is it required in all types of deployments (PtoV, VtoV, PtoP)? Is it used to create the files that are put in the file share for the second node to use during vCSHB installation or is it only used during a vCSHB clone operation of a Physical to Physical deployment? Are these tools not used in some deployments?

You need Windows Server Backup installed on source and destination, and during the installation of vCSHB the installer will invoke the wbadmin (Windows Server Backup Utility) and will backup configuration and application data (application data is optimal but can decrease the sync time after installation of secondary node). On the secondary node you will need only run the vCSHB installer and everything will be restored.
Check this blog entry for some more info about some problems in P2P deployment: http://www.vcoportal.de/2013/12/vmware-vcenter-server-heartbeat-restore-on-a-second-node-a-journey/

Which ActiveX command do I use to IMPORT TEST FILES INTO EXCEL?

Happy New Year!
I am trying to write large data files to XL, but they take very long to write. Now I am trying to write text files and then near the end of teh program import them into an Excel file. IS there an ActiveX command I should use for this (invoke node)?
Thank-you!
Ivanka

Yes, you can do it.
1. Write a simple VBA procedure in Excel to import text file (or, you can use the macro recorder in Excel to do it) and very it works properly.
2. Copy the code into a string constant in your Labview code. The code must contains "Sub ... End Sub"
3. while you are sting inside Excel, disable Excel macro security check to make it to setting "low"
3. If you have report generation toolkit, then there are three methods: Excel Import Module, Run Module and Remove module. Wire those in sequence with all the appropriate inputs. I'm sure there are corresponding method in Excel ActiveX but could not remember it.
4. test it and modify it until it works
Joe
Attachments:
Snap1.gif ‏6 KB

[solved] scritpt to check the used space of different file systems

how to write a scritpt to check the used space of different file systems and print if any file system above 50%
I used this command to get the different filesystem and their used space
df -h | grep -v Filesystem |tr -s " " | cut -d" " -f1,5
Thanks in Advance

Please try this command:
df -Ph | tr -s " " | cut -d" " -f1,5 | sed -n "s/\([5-6][0-9]%\)\|\([0-9]\{3\}%\)/&/p"
It works for me. Good luck
Tiger Zhang
.

E7 Belle - Voice commands cannot be used at the mo...

Hi all.
I have added the Voice cmds shortcut to a home screen as advised on another thread, to allow voice commands to be used after updating the E7-00 to Belle.
Whenever I tap on Voice cmds there is a beep and a popup appears, saying "Voice commands cannot be used at the moment".
I can see that Martin is present in the Phone Setup speech settings and that he is ready to speak in English (UK).
Anyone else have this happen, or any advice on what I can check please?

Hi enginvoiper,
Thank you for posting in Nokia discussions board!
In order to fix the issue you are having, please perform a soft reset on your phone: type *#7780# on the keypad.
If the issue persists, please back up your data using Nokia Suite. Once your data is fully backed up, type *#7370# on your phone's keypad.
Then add the shortcut to the voice command on your home screen again and retry opening it.
Please also regularly check for new upcoming updates as they fix new detected and reocurring issues.
Let us know how you get on and feel free to post any other questions you may have.
Regards,
astra2025
Press the 'Accept Solution' icon if I have solved your problem, Kudos my post if my advice has helped you!

I get "App Store Disabled" on my MacBook Pro due to profile issues. What Terminal command can I use to reset profile settings?

After transferring documents from one MacBook Pro to another I get some weird errors due to settings that seem to have transferred over. One is that the Mac App Store is disabled.
Are there any Unix / Terminal commands I can use to reset these?

Forgot Your Account Password
For Lion/Mountain Lion
    Boot to the Recovery HD:
Restart the computer and after the chime press and hold down the COMMAND and R keys until the menu screen appears. Alternatively, restart the computer and after the chime press and hold down the OPTION key until the boot manager screen appears. Select the Recovery HD and click on the downward pointing arrow button.
     When the menubar appears select Terminal from the Utilities menu.
     Enter resetpassword at the prompt and press RETURN. Follow
     instructions in the dialog window that will appear.
     Or see Reset a Mac OS X 10.7 Lion Password and
     OS X Lion- Apple ID can be used to reset your user account password.

To run a report from command line, when using jdbc-odbc bridge

Hi,
How to run a report from command line, when using jdbc-odbc bridge?
Usually with tns, we do by "rwrun module=<> userid=<user>/<passwd>@tns".
with odbc, we do by "rwrun module=<> userid=<user>/<passwd>@odbc:DSN"
Please specify, what is command line arguments for jdbc-odbc bridge driver?
Environment : Oracle 9i Report Builder on WinNT
Database : Sybase
Regards,
Ramanan

Hello Ramanan,
Report Builder : connect JDBC Query in Report Builder is to through Connection Dialog in JDBC Query Editor. User can use a Sign on parameter (can use, default : P_JDBCPDS or can create new) to connect to JDBC Data Source. Connection once made will be mentioned and will be reused through out Reports Builder.
JDBC PDS allows user to connect one or more same or different kind of databases.
While running report through runtime or Server, user can pass the sign on parameter(connection string) value, like any other user parameter.
Syntax for connection string : <username>/<password>@databaseURL . The syntax of database part of connection string depend on the type of JDBC Driver used to connect to Data Source while designing the JDBC Query. databaseURL refer to the location of the database and its format depend on the JDBCPDS river selected in design time while creating the JDBC Query.
rwrun eg :
rwrun report=jdbc_odbc.rdf destype=file desname=output.html desformat=html P_JDBCPDS=scott/tiger@database
Server eg :
http://server.com:8888/servlet/RWServlet?server=MyReportServer+report=jdbc_odbc.rdf+destype=cache+desformat=html+P_JDBCPDS=scott/tiger@database
http :
Please see ORACLE_HOME/reports/conf/jdbcpds.conf for more information.
With Regards
Reports Team

Windows 8.1 Pro Need command to disable "Use default gateway on remote network" option on VPN connection"

Hello!
I want to create bat script to create several VPN connection.
There is powershell command to create vpn connection:
add-vpnconnection -name "Test VPN" -serveraddress "vpn.example.com" -splittunneling -tunneltype "pptp"
And I need to create VPN connection without the option "Use default gateway on remote network" option on VPN connection"
Or modify this option on existent VPN connection with command.
Please help me to find command option or other command to disable "Use default gateway on remote network" option on VPN connection" feature.

http://technet.microsoft.com/nl-nl/library/ee431701%28v=ws.10%29.aspx RouteIPv4TrafficOverRAS True – Add a default gateway on the VPN connection False – Do not add default gateway on the VPN connection

You want to know the amount of space the transaction log for the Customer database is using. Which T-SQL command would you use?

You want to know the amount of space the transaction log for the Customer database is using. Which T-SQL command would you use?

Forced me to do a little research.
DBCC SQLPERF(logspace)
See also
http://stackoverflow.com/questions/198343/how-can-i-get-the-size-of-the-transaction-log-in-sql-2005-programmatically
For every expert, there is an equal and opposite expert. - Becker's Law
My blog
My TechNet articles

Custom splash screen only shows up when command line is used...

Hi,
Everything in my Java web start application works perfectly but, the custom splash screen only shows up when command line is used ("C:\Program Files (x86)\Java\jre7\bin>javaws -verbose http://www.xxx.eu/AcSentVivresCrus/AcSentJnlp/AcSent.jnlp"), if I use the shortcut on the desktop or in the start menu, the Java 7 splash screen shows up (tested under Windows Vista and Seven). Does someone have any clues?
Thanks...
My jnlp file :
<?xml version="1.0" encoding="UTF-8"?>
<jnlp spec="6.0+" href="AcSent.jnlp">
<information>
    <title>AcSent : Commande de repas</title>
    <description>AcSent - Commande de repas</description>
    <vendor>AcSent</vendor>
    <homepage href="http://www.xxx.eu" />
    <icon href="acSentIconBiseau.png" />
    <icon href="splashAcSentRC.png" kind="splash" />
    <shortcut online="true">
      <desktop />
      <menu submenu="AcSent" />
    </shortcut>
</information>
<security>
    <all-permissions />
</security>
<resources>
    <j2se version="1.6+" href="http://java.sun.com/products/autodl/j2se" max-heap-size="128m" />
    <jar href="AcSentJnlpProgressIndicator.jar" download="progress" />
    <jar href="AcSentJnlp.jar" main="true" version="1.0" />
    <property name="jnlp.packEnabled" value="true" />
    <property name="jnlp.versionEnabled" value="true" />
</resources>
<application-desc name="AcSent" main-class="eu.acsent.jnlp.AcSentApplication"
     progress-class="eu.acsent.jnlp.progressindicator.CustomProgress">
</application-desc>
</jnlp>

Hi again,
I made some researches :
- The link in the generated shorcuts ("C:\Windows\SysWOW64\javaws.exe -localfile -J-Djnlp.application.href=http://www.xxx.eu/AcSentVivresCrus/AcSentJnlp/AcSent.jnlp "C:\Users\Arnaud\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\46\69c1e9ee-1f252d1a") is not the same as the one I use in the command line ("C:\Program Files (x86)\Java\jre7\bin>javaws -verbose http://www.xxx.eu/AcSentVivresCrus/AcSentJnlp/AcSent.jnlp"). Is there a way in the the JNLP file to tell how to generate shortcuts (not the icon, etc., but command line options)?
- This sample (https://blogs.oracle.com/thejavatutorials/entry/changing_the_java_web_start) displays the splash screen when I click on the the generated shortcuts (I use Windows 7). I have copied the ButtonDemo jar file and the JNLP file on my IIS web server (Windows 2008 Server), this time the splash screen does not show up when I click the generated shortcuts but always shows up when I use the command line. Can someone tell me if it is a trouble with IIS ?
Thanks again...

Regd. error in sender agreement(when to check sender uses virtual receiver)

hi Experts,
I am doing a file( SFTP adapter ) to IDOC scenario.
I got an error :
Couldn't retrieve inbound binding for the given P/S/A values:FP=XYZ;TP=;FS=XXXX;TS=XXXX;AN=XXXXXX;ANS=;
I checked my sender agreement and saw some "*" symbol displayed at the end on SA name.
To quick fix it and remove the star symbol'', i have just created SAgreement again and this time i checked "Sender uses virtual receiver " and revomved thestar symbol '' and saved without mentioning anything there.
When i tested it worked! but i want to know what made it work, is it the right practice.
i did a lilttle search on when to use "sender uses virtual receiver" option.i came to an understanding that it is mainly used to handle multiple input file formats in a single configuration scenario.
one more qns:
What are marketplace adapters,is this error comes when we use adapters which are not inbuilt or bought from external vender.
Regards,
Anika
Edited by: Anika Gulati on Jun 10, 2009 1:23 PM

Here are few ways for it...
SAP Process Integration: When to Use u201CSender Uses Virtual Receiveru201D in a Sender Agreement
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/40cb67f7-6464-2b10-bcb9-8edb9a3569f9
SAP Network Blog: Virtual Receiver - Why do you 'really' need it?
/people/shabarish.vijayakumar/blog/2008/09/16/virtual-receiver--why-do-you-really-need-it
-SM

How to automate DB health check report using OEM 11g

Hi,
I have been asked to share the DB health check report using OEM 11g. Could you please let me know how to achieve this and the report should go to his email.
Thanks in advance,
Bala

check,
manually you can schedule it through dbms_hm
http://www.oracle.com/technetwork/articles/sql/11g-resiliency-091703.html

Send command to modem using serial port and capture the response in the labview

hello.
I am doing my shool project.
I want to send command to modem using serial port and get the response in the labview.
When i run my program and enter"AT", only messy code will be displayed.
can anyone help me? thanks

Dora0512 wrote:
Thanks for you all. My partner got it already.
I am doing send sms part.
Can anyone tell me why my program is not so steadily?
It means this program can run. But somtimes I cannot receive sms. sometimes can
Basically, it is not well-written from both a LabVIEW and a communications point of view. Unfortunately, I can't elaborate because today is an exrtremely busy day at work. I'm hoping this bump will prompt someone to help you with your problem. If you could also provide us with the programmer's guide or the manual for your equipment, that would be extremely helpful.
Bill
(Mid-Level minion.)
My support system ensures that I don't look totally incompetent.
Proud to say that I've progressed beyond knowing just enough to be dangerous. I now know enough to know that I have no clue about anything at all.

ASA Command check bandwith use.

Similar Messages

Maybe you are looking for