We are observing a high interface load (spikes up to 1G) on a WAN (dedicated link) uplink port of a Cisco switch. How can we find the IP of the client that is causing this high load?
I have done some research before asking: I have looked at NetFlow manual, but could not find any examples of
matches relevant to my problem. Also, we don't have a network monitoring host to send the traffic to. I have also come across IP Accounting, but it is deprecated for our switch.
This is a new install.
Our hardware is Cisco Nexus 5672UP, 7.3(0)N1(1)
Could someone please suggest a set of commands (potentially involving NetFlow in cached mode) to get from an interface name to a table of IP addresses with their transient bandwidth usages?