Re: Monitoring ICMP

From: Cezar Fistik (cfistik@moldovacc.md)
Date: Thu Feb 20 2003 - 16:07:41 GMT-3


You can try this:

ip access-list extended ICMPLIST
deny icmp any any
permit ip any any
!
int ser 0.1 multipoint
ip accounting access-violation
ip access-list ICMPLIST out
..
..

Then,

show ip accounting access-violations

it will show you something like this

Router# show ip accounting access-violations
Source Destination Packets Bytes ACL
131.108.19.40 192.67.67.20 7 306 77
131.108.13.55 192.67.67.20 67 2749 185
131.108.2.50 192.12.33.51 17 1111 140
131.108.2.50 130.93.2.1 5 319 140
131.108.19.40 130.93.2.1 4 262 77
Accounting data age is 41

Regards,
Cezar Fistik

----- Original Message -----
From: "Sanfilippo, Ted" <Ted.Sanfilippo@PaeTec.com>
To: <ccielab@groupstudy.com>
Sent: Thursday, February 20, 2003 9:43 AM
Subject: Monitoring ICMP

> I had a question in a lab scenario that asked to monitor ICMP traffic and
be
> able to report on how many packets and where they are going. The
access-list
> needs to be named ICMPLIST. This was on a router that was a multipoint
> connected to two other routers ( R1 in the diagram).
>
>
> R1 -------------- R2
> \
> \
> \
> \
> R3
>
> Any idea on what I can use to monitor this and obtain the information
> stated?
>
>
>
>
> Ted Sanfilippo



This archive was generated by hypermail 2.1.4 : Sat Mar 01 2003 - 11:06:31 GMT-3