Monitoring CLI-Based Packet Mirroring

Purpose

Display brief or default (normal) information about your CLI-based packet mirroring environment, including interface analyzer information. To display secure packet mirroring information you must enable the mirror-enable command before using this command. This command displays a maximum of two secure policy attachments and statistics, if configured.

Action

To display the default (normal) format for a specific interface, which is used as the default analyzer interface:

host1#show ip interface atm 5/0.1
ATM5/0.1 line protocol Atm1483 is up, ip is analyzer (default)
  Network Protocols: IP
  Internet address is 10.10.3.4/255.255.255.0
  Broadcast address is 255.255.255.255
  Operational MTU = 0  Administrative MTU = 0
  Operational speed = 100000000  Administrative speed = 0
  Discontinuity Time = 0
  Router advertisement = disabled
  Proxy Arp = disabled
  Administrative debounce-time = disabled 
  Operational debounce-time    = disabled 
  Access routing = disabled 
  Multipath mode = hashed
  In Received Packets 0, Bytes 0
    Unicast Packets 0, Bytes 0
    Multicast Packets 0, Bytes 0
  In Policed Packets 0, Bytes 0
  In Error Packets 0
  In Invalid Source Address Packets 0
  In Discarded Packets 0
  Out Forwarded Packets 0, Bytes 0
    Unicast Packets 0, Bytes 0
    Multicast Routed Packets 0, Bytes 0
  Out Scheduler Dropped Packets 0, Bytes 0
  Out Policed Packets 0, Bytes 0
  Out Discarded Packets 0

To display the format for a specific interface, showing secure policy attachments:

host1#show ip interface atm 4/1.1
ATM5/0.1 line protocol Atm1483 is up
  Network Protocols: IP
  Internet address is 10.10.7.14/255.255.255.0
  Broadcast address is 255.255.255.255
  Operational MTU = 0  Administrative MTU = 0
  Operational speed = 100000000  Administrative speed = 0
  Discontinuity Time = 0
  Router advertisement = disabled
  Proxy Arp = disabled
  Administrative debounce-time = disabled 
  Operational debounce-time    = disabled 
  Access routing = disabled 
  Multipath mode = hashed
  In Received Packets 0, Bytes 0
    Unicast Packets 0, Bytes 0
    Multicast Packets 0, Bytes 0
  In Policed Packets 0, Bytes 0
  In Error Packets 0
  In Invalid Source Address Packets 0
  In Discarded Packets 0
  Out Forwarded Packets 0, Bytes 0
    Unicast Packets 0, Bytes 0
    Multicast Routed Packets 0, Bytes 0
  Out Scheduler Dropped Packets 0, Bytes 0
  Out Policed Packets 0, Bytes 0
  Out Discarded Packets 0
  IP policy secure-input ipSecureIn
    classifier-group secClassA entry 1
      0 packets, 0 bytes
      mirror analyzer-ip-address 10.10.3.14, analyzer-virtual-router default
    classifier-group secClassB entry 2
      0 packets, 0 bytes
      mirror analyzer-ip-address 10.10.3.14, analyzer-virtual-router vr200
  IP policy secure-output ipSecureOut
    classifier-group secClassC entry 1
      0 packets, 0 bytes
      mirror analyzer-ip-address 10.10.7.104, analyzer-virtual-router vr300

Meaning

Table 63 lists the secure packet mirroring-related fields.

Table 63: show ip interface Output Fields

Field Name

Field Description

IP Policy

Type (secure-input, secure-output) and name of the secure policy

classifier-group

Name of a CLACL attached to the interface and number of entry

packets

Number of packets classified by the CLACL

bytes

Number of bytes classified by the CLACL

mirror analyzer-ip-address

IP address of analyzer device

analyzer-virtual-router

Name of analyzer interface virtual router

Related Documentation