RE: Monitoring ICMP

From: soon ccie (soonccie@yahoo.com)
Date: Fri Feb 21 2003 - 05:39:58 GMT-3


Not sure if nbar or ip accounting help collecting # of packets by the
ACL?

Also, log-input provides more info than log.

--- "Sanfilippo, Ted" <Ted.Sanfilippo@PaeTec.com> wrote:
> I don't know.
>
> -----Original Message-----
> From: Sam Munzani [mailto:sam@munzani.com]
> Sent: Thursday, February 20, 2003 1:05 PM
> To: Lileikis, Gary; Sanfilippo, Ted; ccielab@groupstudy.com
> Subject: Re: Monitoring ICMP
>
>
> Is there an OID that gives access-list hit counters?
>
> Thanks,
> Sam
>
>
> > Could this be what you are looking for?
> >
> > R1
> > Show run
> > ip access-list extended icmplist
> > permit icmp any host 150.50.100.4 log
> > permit icmp any host 150.50.100.6 log
> >
> > r1#show access-lists
> > Extended IP access list icmplist
> > permit icmp any host 150.50.100.4 log (5 matches)
> > permit icmp any host 150.50.100.6 log (20 matches)
> >
> > Cheers...Gary
> >
> > -----Original Message-----
> > From: Sanfilippo, Ted [mailto:Ted.Sanfilippo@PaeTec.com]
> > Sent: Thursday, February 20, 2003 9:43 AM
> > To: 'ccielab@groupstudy.com'
> > Subject: Monitoring ICMP
> >
> >
> > I had a question in a lab scenario that asked to monitor ICMP
> traffic and
> be
> > able to report on how many packets and where they are going. The
> access-list
> > needs to be named ICMPLIST. This was on a router that was a
> multipoint
> > connected to two other routers ( R1 in the diagram).
> >
> >
> > R1 -------------- R2
> > \
> > \
> > \
> > \
> > R3
> >
> > Any idea on what I can use to monitor this and obtain the
> information
> > stated?
> >
> >
> >
> >
> > Ted Sanfilippo



This archive was generated by hypermail 2.1.4 : Sat Mar 01 2003 - 11:06:32 GMT-3