I have enabled top-talkers ingress/egress
ip flow-top-talkers top 10 sort-by bytes cache-timeout 1
I wanted to confirm a couple things with the output below
1.) When I see a (K), I assume its Kilobytes, NOT Kilobits? 2.) I see two different flows for the same source. Could an example of this be when someone is downloading a file and uploading or streaming music simultaneously?
R2#show ip flow top-talkers SrcIf SrcIPaddress DstIf DstIPaddress Pr SrcP DstP Bytes Fa0/0 192.168.1.1 Local 192.168.1.2 01 0000 0800 2257K Fa0/0 192.168.1.1 Local 192.168.1.2 01 0000 0000 165K 2 of 10 top talkers shown. 2 flows processed.