RE: IP accounting

From: SHARMA,MOHIT (HP-Germany,ex1) (mohit.sharma@hp.com)
Date: Wed Jun 25 2003 - 17:55:31 GMT-3


Hi,
 
Thanx a lot for the explanation.
 
Smiles,
 
Mohit.
-----Original Message-----
From: sadame@unitel.co.kr [mailto:sadame@unitel.co.kr]
Sent: Wednesday, June 25, 2003 2:56 PM
To: ccielab@groupstudy.com; mohit.sharma@hp.com
Subject: Re: IP accounting

hi there

 "ip accounting-threshold" is to limit maximum number of entries stored in
the ip accounting-database

for example

10.1.1.1
10.1.1.2 -- R1 E1 ----- E0 R2 s0 ------s1 R3 80.80.80.80
10.1.1.x
   .
   .
   .
 250 hosts

 the configure on R2
!
ip accounting-threshold 100
!
 interface serial 0
  ip accounting output-packets
!

if the hosts with variable source ip ping the destination host
80.80.80.80,
one pair [ source ip - destination ip ] means one entry that cisco IOS
accumulates in the ip accounting-database

so, " ip accounting-threshold 100" means IOS limits the number of the pairs
     [ source ip - destination ip ] to 100 entries

 output is

############################################################################
###############

R2#show ip accounting
   Source Destination Packets Bytes
  10.1.1.1 80.80.80.80 5 500
  10.1.1.2 80.80.80.80 10 1500
    . 80.80.80.80 2 200
    . . . .
  10.1.1.100 80.80.80.80 . . =>
100 entries

############################################################################
#################

 " ip accounting-transits " is to limit the number of packets that not
match any of the filters specified
 by ip accounting-list global configuration commands

 for example

170.100.200.4 R1 ----- E0 R2 s0 ------------------- R3 80.80.80.80

  the configure on R2
!
ip access-list standard Internetfilter
 permit 192.5.34.0 0.0.0.255
!
ip accounting-transit 50
!
int serial 0
 ip accounting output-packets
!

if the host with ip 170.100.200.4 pings the host with ip 80.80.80.80 with
100 packets,
the 50 packets of 100 packets that are transited are accumulated on the
transit records of the IP accounting database.
the ip address,170.100.200.4 doesn't match the filters of "Internetfilter"
 
 output is

############################################################################
###############

R2#show ip accounting
   Source Destination Packets Bytes
  170.100.200.4 80.80.80.80 50 ~ =>
50 packets are stored

############################################################################
######



This archive was generated by hypermail 2.1.4 : Fri Jul 04 2003 - 11:11:09 GMT-3