Logging 2

[RadioX]

Is thre some sort of logging I can do on a router to see ip traffice and all sorts of information

I have a cisco 3640

Thanks
Ron

 

[RouterGod]

Enter this command at the privileged EXEC prompt:

show ip traffic Regards,

Don

 

[RadioX]

yes I know about this command but I want to see actual ip address that have entered into the network.

Thanks
Ron

 

[RouterGod]

The "show ip arp" command will display what addresses have been accessing what interface, and what protocol its using as well as obviously showing the MAC address of the station.

Alternatively using "debug ip-packet" will allow you to log all IP packets that passed the interfaces in which addresses can be derived.
Regards,

Don

 

[wybnormal]

set up an accesslist permiting the IP address and then log the activity against the access list.

SAMPLE OUTPUT:
07-01-2001 18:56:00 Local7.Info 192.1.1.1 30: 3w5d: %SEC-6-IPACCESSLOGDP:list 109 denied icmp 192.168.50.20 (Ethernet0 00d0.09f7.14bc) -> 192.1.3.4 (0/0), 1 packet

Command:

access-list (IP extended)
To define an extended IP access list, use the extended version of the
access-list global configuration command. To remove the access lists, use
the no form of this command.
access-list access-list-number [dynamic dynamic-name [timeout minutes]]
{deny | permit} protocol source source-wildcard destination
destination-wildcard [precedence precedence] [tos tos] [log | log-input]

MikeS
"Diplomacy; the art of saying 'nice doggie' till you can find a rock" Wynn Catlin

 

[marks66]

To get simple IP Stats I use ip accounting on the interfaces. It will show you IP conversations/volumes, and helps identify "top talkers".

Mark S

 

[daShader]

Mark, how can you check who are "top talkkers"?

Is there a way to make router log all tcp communcations?

for example to get soething like


10.10.1.1 -> 192.168.1.1 PROTOCOL, PORT, SIZE of packet
and so on for each packet



TIA!

 

[nayeem]

brothers
the command sh ip arp shos only the ethernet or fast ethernet.no serial port access????