Monitoring Packet Drop Statistics - Cisco 7609 Configuration Manual
Cisco ios software configuration guide—12.1e
Hide thumbs
Also See for 7609:
- Installing (22 pages) ,
- Datasheet (5 pages) ,
- Frequently asked questions (5 pages)
Table of Contents
Advertisement
Configuring DoS Protection
Monitoring Packet Drop Statistics
Because the rate-limiting mechanism allows a certain number of packets to be forwarded for software
processing, you can view the packet drop statistics by entering NetFlow show commands from the CLI.
You can also capture the incoming or outgoing traffic on an interface and send a copy of this traffic to
an external interface for monitoring by, for example, a traffic analyzer. To capture traffic and forward it
to an external interface, use the monitor session commands.
Monitoring Dropped Packets Using NetFlow Commands
The following NetFlow commands display flows that are destined to the router MAC that are either
hardware switched or forwarded to the route processor.
Displaying statistics based on source or flow only works if the MLS NetFlow flowmask is set to a value
greater than destination-only.
Router# show mls ip
Displaying Netflow entries in Supervisor Earl
DstIP
--------------------------------------------------------------------
200.2.5.3
Pkts
---------------------------------------------------
0
Router# show mls netflow flowmask
current ip flowmask for unicast: destination only
current ipx flowmask for unicast: destination only
Router# configure terminal
Enter configuration commands, one per line.
Router(config)# mls flow ip destination-source
Router(config)# exit
1w6d: %SYS-5-CONFIG_I: Configured from console by console
Router# show mls ip
Displaying Netflow entries in Supervisor Earl
DstIP
--------------------------------------------------------------------
200.2.5.3
Pkts
---------------------------------------------------
0
Router#
When you use the show mls ip command to display information about flows for a specific source or
destination address, the command accepts 32 host prefixes only. When you use the output modifiers, you
might see all flows from a specific subnet.
Router# show mls ip source 9.9.9.2 mod 4
Displaying Netflow entries in module 4
DstIP
--------------------------------------------------------------------
9.9.9.177
Pkts
---------------------------------------------------
0
Router# show mls ip mod 4 | include 9.9.9
9.9.9.177
Cisco 7600 Series Router Cisco IOS Software Configuration Guide—12.1E
24-6
SrcIP
Prot:SrcPort:DstPort
0.0.0.0
0
Bytes
Age
LastSeen
0
1
01:52:25
SrcIP
Prot:SrcPort:DstPort
223.255.254.226 0
Bytes
Age
LastSeen
0
2
01:54:05
SrcIP
Prot:SrcPort:DstPort
9.9.9.2
0
Bytes
Age
LastSeen
0
28
01:56:59
9.9.9.2
0
Chapter 24
Src i/f:AdjPtr
:0
:0
0
: 0
Attributes
L3 - Dynamic
End with CNTL/Z.
Src i/f:AdjPtr
:0
:0
0
Attributes
L3 - Dynamic
Src i/f:AdjPtr
:0
:0
0
Attributes
L3 - Dynamic
:0
:0
0
: 0
Configuring Denial of Service Protection
: 0
: 0
78-14064-04
Advertisement
Table of Contents
Troubleshooting
