《路由器教程》由会员分享，可在线阅读，更多相关《路由器教程（8页珍藏版）》请在金锄头文库上搜索。
1、路由器1. 登陆路由器开始一运行cmd,弹出DOS命令符，输入telnet 192.168.0.254,如果输入Password： dyx123然后继续输入enable, password： dyx123按回车，路由器提示符由JinGuan-Router 模式转换为特权模式 JinGuan-Router#如下图所示：2. 检查主机流量使用命令show ip accounting。命令如下，source表示源主机，Destination表示目的主机， Packets表示在特定时间内发送网络数据包的数量，Bytes表示在特定时间内发送的流量。 这个特定时间是在最下面Accounting data
2、age is 1看的，1表示1分钟内。一般这里显示的 数据都很多，要查看之前先使用 clear ip accounting 清楚掉历史记录，然后再使用 show ip accounting查看最新流量统计。JinGuan-Router#show ip accountingSourceDestinationPacketsBytes121.33.77.106192.168.0.166416221.232.242.162192.168.1.41141192.168.2.6192.168.0.8147192.168.0.8192.168.2.6146113.109.215.222192.168.2.1
3、104186125.114.108.61192.168.0.37312058.61.33.84192.168.2.62480113.111.53.110192.168.2.143237116.22.93.121192.168.2.66282121.14.228.44192.168.0.25011254119.147.4.172192.168.0.102791219.133.48.53192.168.2.4176219.133.63.54192.168.0.6111458.60.14.56192.168.0.9168192.168.0.1192.168.2.1042210660192.168.2
4、.104192.168.0.114946122.232.19.160192.168.0.376288192.168.0.1192.168.2.1098322489192.168.2.109192.168.0.1708089219.133.60.23192.168.2.103110064.4.34.80192.168.0.351288124.131.220.218192.168.0.305420222.189.228.118192.168.0.85953119.147.15.30192.168.0.56203358.251.58.121192.168.2.11618260.191.80.3419
5、2.168.2.6160219.133.49.177192.168.0.184276121.33.205.89192.168.2.9160121.33.205.89192.168.0.28160125.71.3.234192.168.2.56279121.14.76.234192.168.0.5121486219.133.49.191192.168.2.5110061.144.0.2192.168.2.6160114.80.98.29192.168.0.250173121.15.210.4192.168.0.163674124.115.2.213192.168.2.110280125.87.7
6、7.201192.168.0.37140219.133.60.236192.168.0.56250861.139.219.212192.168.0.37184221.7.91.31192.168.1.35453220.181.9.11192.168.0.251152119.147.15.126192.168.0.57685202.96.128.166192.168.0.301168Accounting data age is 1如果只看某台主机的流量统计，可以使用include命令，命令使用如下:JinGuan-Router#show ip accounting | in 192.168.1.
7、1113.83.6.94192.168.1.1291392192.168.1.12192.168.2.23161074192.168.2.23192.168.1.12201700192.168.1.12192.168.2.221035610146192.168.2.22192.168.1.121063384300192.168.1.12192.168.2.21151021192.168.2.21192.168.1.12191568192.168.1.12192.168.2.102161270192.168.2.102192.168.1.1222209261.142.208.195192.168
8、.1.173993. 检查主机连接数量使用命令show ip nat translations，可以查看主机的NAT表，连接数量。根据连接数量 和连接端口可以判断某主机是否在下载或者中病毒等。命令如下：inside global是本地对外 的公网 IP， inside local 是本地主机， outside local 和 outside global 都是外部地址。JinGuan-Router#show ip nat translationsPro Inside global Inside local Outside local Outside global udp 121.33.205.
9、93:1626192.168.0.18:162669.123.13.230:4704769.123.13.230:47047tcp 121.33.205.93:4846192.168.2.101:4846221.176.31.42:443221.176.31.42:443tcp 121.33.205.93:1056192.168.0.37:3145221.176.31.101:80221.176.31.101:80udp 121.33.205.93:1127192.168.0.37:1127121.14.100.210:8000121.14.100.210:8000tcp 121.33.205
10、.93:2665192.168.0.35:2665119.147.15.64:80119.147.15.64:80tcp 121.33.205.93:3909192.168.2.6:3909119.147.74.102:80119.147.74.102:80udp 121.33.205.93:13968192.168.0.106:13968202.102.57.89:8000202.102.57.89:8000tcp 121.33.205.93:3911192.168.2.6:3911119.147.74.102:80119.147.74.102:80tcp 121.33.205.93:391
11、3192.168.2.6:3913119.147.74.102:80119.147.74.102:80如果某台主机和外部很多主机通信，非常多。而且端口都是4000 以上的，那肯定是在 下载了。这靠平时积累经验来观察。同样，要看特定主机的对外连接情况，也是使用 include 命令。JinGuan-Router#show ip nat translations | in 192.168.0.28tcp 121.33.205.93:2518192.168.0.28:2518221.238.249.186:80221.238.249.186:80tcp 121.33.205.93:2624192.1
12、68.0.28:262461.172.201.204:8061.172.201.204:80tcp 121.33.205.93:2630192.168.0.28:263061.172.201.204:8061.172.201.204:80udp 121.33.205.93:57163192.168.0.28:57163202.96.128.86:53202.96.128.86:53tcp 121.33.205.93:2689192.168.0.28:268961.172.201.204:8061.172.201.204:80icmp 121.33.205.93:512192.168.0.28:
13、512121.33.205.89:512121.33.205.89:512tcp 121.33.205.93:1038192.168.0.28:257158.63.236.47:8058.63.236.47:80tcp 121.33.205.93:1024192.168.0.28:258258.63.236.72:8058.63.236.72:80udp 121.33.205.93:55280192.168.0.28:55280202.96.128.86:53202.96.128.86:534. 检查连接协议使用命令show ip cache flow。该命令可以统计整个网络的流分布情况。命令
14、如下：JinGuan-Router#show ip cache flowIP packet size distribution (1753814 total packets):1-32 64 96 128 160 192 224 256 288 320 352 384 416 448 .000 .411 .072 .043 .020 .019 .011 .006 .004 .003 .003 .004 .006 .012 .001512 544 576 1024 1536 2048 2560 3072 3584 4096 4608 .001 .001 .207 .014 .154 .000 .000 .000 .000 .000 .000IP Flow Switching Cache, 278544 bytes396 active, 3700 inactive, 100411 added1835610 ager po
