in

CCIE - Internetwork Expert's Online Community
Forums » Internetwork Expert Products » CCIE R&S Lab Workbook Volume I Version 5.0 » IP Services - Netflow - 13.47
Latest post 11-15-2008 5:38 AM by NTllect. 4 replies.
Page 1 of 1 (5 items)
Sort Posts: Previous Next

  • 10-27-2008 3:01 AM

    • rdobre
    • Top 500 Contributor
    • Joined on 10-07-2008
    • Posts 2
    • Points 40

    IP Services - Netflow - 13.47

    Reply Contact

    I was doing the Netflow labs during the weekend and the solution of the lab 13.47 raised me a question .....

    The lab is asking to find the top 10 talkers of the ICMP protocol and the solution is  matching the icmp protocol by "match protocol 1", options beeing "match protocol [1 - 255]" .

    Can you please clarify how was the icmp binding made to protocol 1?

    Regards,

    Robert

     

     
    • Post Points: 20

  • 10-27-2008 3:46 AM In reply to

    • rmur
    • Top 50 Contributor
    • Joined on 08-18-2008
    • Netherlands
    • Posts 53
    • Points 655

    Re: IP Services - Netflow - 13.47

    Reply Contact
    The match protocol matches the protocol field in the IP header.
    If you see the IANA protocol number list you see ICMP is 1.
    It's good to know some basics of this list, like 6=TCP, 17=UDP, 41=IPv6-IP tunnel

    http://www.iana.org/assignments/protocol-numbers/

    Regards,

    Rick Mur
    CCIE #21946

    On 27 okt 2008, at 11:05, rdobre wrote:

    I was doing the Netflow labs during the weekend and the solution of the lab 13.47 raised me a question .....

    The lab is asking to find the top 10 talkers of the ICMP protocol and the solution is  matching the icmp protocol by "match protocol 1", options beeing "match protocol [1 - 255]" .

    Can you please clarify how was the binding made  to icmp to protocol 1?

    Regards,

    Robert

     
     



    Internetwork Expert - The Industry Leader in CCIE Preparation
    http://www.internetworkexpert.com

    Subscription information may be found at:
    http://www.ieoc.com/forums/ForumSubscriptions.aspx

    CCIE #21946 (R&S), CCNP, CCIP, JNCIA-ER, MCSE 2003
    • Post Points: 20

  • 10-27-2008 7:19 AM In reply to

    • rdobre
    • Top 500 Contributor
    • Joined on 10-07-2008
    • Posts 2
    • Points 40

    Re: IP Services - Netflow - 13.47

    Reply Contact

    Make sense now.

    Thanks

    Robert

    • Post Points: 20

  • 10-28-2008 6:25 AM In reply to

    Re: IP Services - Netflow - 13.47

    Reply Contact
    A good reference for this in the exam is the ASA "addresses, protocols, and ports" document.  From the main documentation page go to:

    • Security
      • Firewall Appliances
        • Cisco ASA 5500
          • Configuration Guides
            • Version 8.0
              • Reference
                • Addresses, Protocols, and Ports

    Brian McGahan, CCIE #8593 (R&S/SP/Security)
    bmcgahan@internetworkexpert.com

    Internetwork Expert, Inc.
    http://www.InternetworkExpert.com
    Toll Free: 877-224-8987 x 705
    Outside US: 775-826-4344 x 705
    Online Community: http://www.IEOC.com
    CCIE Blog: http://blog.internetworkexpert.com


    rdobre wrote:

    Make sense now.

    Thanks

    Robert




    Internetwork Expert - The Industry Leader in CCIE Preparation
    http://www.internetworkexpert.com

    Subscription information may be found at:
    http://www.ieoc.com/forums/ForumSubscriptions.aspx
    • Post Points: 20

  • 11-15-2008 5:38 AM In reply to

    • NTllect
    • Top 10 Contributor
    • Joined on 07-11-2008
    • CIS
    • Posts 269
    • Points 3,860

    Re: IP Services - Netflow - 13.47

    Reply Contact

    the last bullet asking for matching tcp and icmp protocols, but solutions considers only icmp ? is there any default?

     

    As for task 13.46 , there is mentioning about BGP origin AS aggregation if available, but solution doesn't reflect it.

    • Post Points: 5
Page 1 of 1 (5 items)