RE: Monitoring ICMP

From: adz (ccie1day@totalise.co.uk)
Date: Thu Feb 20 2003 - 13:49:45 GMT-3


how about.....

ip access-list extended ICMPLIST
 permit icmp any any log
 permit ip any any
!
logging buffered 8192 !optional
logging on
no logging console !optional - but recommended because the data rate could
be high
logging xxx.xxx.xxx.xxx !your syslog server

then on the inteface you want to monitor,
eg
interface serial 3/0.100 multipoint
ip access-group ICMPLIST in
ip access-group ICMPLIST out
no ip route-cache

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
Sanfilippo, Ted
Sent: 20 February 2003 14:43
To: 'ccielab@groupstudy.com'
Subject: Monitoring ICMP

I had a question in a lab scenario that asked to monitor ICMP traffic and be
able to report on how many packets and where they are going. The access-list
needs to be named ICMPLIST. This was on a router that was a multipoint
connected to two other routers ( R1 in the diagram).

R1 -------------- R2
   \
     \
       \
         \
          R3

Any idea on what I can use to monitor this and obtain the information
stated?

Ted Sanfilippo



This archive was generated by hypermail 2.1.4 : Sat Mar 01 2003 - 11:06:31 GMT-3