[Contents] [Prev] [Next] [Index] [Report an Error] [No Frames]

Monitoring CLI-Based Packet Mirroring

Purpose

Display brief or default (normal) information about your CLI-based packet mirroring environment, including interface analyzer information. To display secure packet mirroring information you must enable the mirror-enable command prior to using this command. This command displays a maximum of two secure policy attachments and statistics, if configured.

Action

To display the default (normal) format for a specific interface, which is used as the default analyzer interface:

host1#show ip interface atm 5/0.1

ATM5/0.1 line protocol Atm1483 is up, ip is analyzer (default)

  Network Protocols: IP

  Internet address is 10.10.3.4/255.255.255.0

  Broadcast address is 255.255.255.255

  Operational MTU = 0  Administrative MTU = 0

  Operational speed = 100000000  Administrative speed = 0

  Discontinuity Time = 0

  Router advertisement = disabled

  Proxy Arp = disabled

  Administrative debounce-time = disabled

  Operational debounce-time    = disabled

  Access routing = disabled

  Multipath mode = hashed

  In Received Packets 0, Bytes 0

    Unicast Packets 0, Bytes 0

    Multicast Packets 0, Bytes 0

  In Policed Packets 0, Bytes 0

  In Error Packets 0

  In Invalid Source Address Packets 0

  In Discarded Packets 0

  Out Forwarded Packets 0, Bytes 0

    Unicast Packets 0, Bytes 0

    Multicast Routed Packets 0, Bytes 0

  Out Scheduler Dropped Packets 0, Bytes 0

  Out Policed Packets 0, Bytes 0

  Out Discarded Packets 0

To display the format for a specific interface, showing secure policy attachments:

host1#show ip interface atm 4/1.1

ATM5/0.1 line protocol Atm1483 is up

  Network Protocols: IP

  Internet address is 10.10.7.14/255.255.255.0

  Broadcast address is 255.255.255.255

  Operational MTU = 0  Administrative MTU = 0

  Operational speed = 100000000  Administrative speed = 0

  Discontinuity Time = 0

  Router advertisement = disabled

  Proxy Arp = disabled

  Administrative debounce-time = disabled

  Operational debounce-time    = disabled

  Access routing = disabled

  Multipath mode = hashed

  In Received Packets 0, Bytes 0

    Unicast Packets 0, Bytes 0

    Multicast Packets 0, Bytes 0

  In Policed Packets 0, Bytes 0

  In Error Packets 0

  In Invalid Source Address Packets 0

  In Discarded Packets 0

  Out Forwarded Packets 0, Bytes 0

    Unicast Packets 0, Bytes 0

    Multicast Routed Packets 0, Bytes 0

  Out Scheduler Dropped Packets 0, Bytes 0

  Out Policed Packets 0, Bytes 0

  Out Discarded Packets 0

  IP policy secure-input ipSecureIn

    classifier-group secClassA entry 1

      0 packets, 0 bytes

      mirror analyzer-ip-address 10.10.3.14, analyzer-virtual-router default

    classifier-group secClassB entry 2

      0 packets, 0 bytes

      mirror analyzer-ip-address 10.10.3.14, analyzer-virtual-router vr200

  IP policy secure-output ipSecureOut

    classifier-group secClassC entry 1

      0 packets, 0 bytes

      mirror analyzer-ip-address 10.10.7.104, analyzer-virtual-router vr300

Meaning

Table 51 lists the secure packet mirroring-related fields.

Table 51: show ip interface Output Fields

Field Name	Field Description
IP Policy	Type (secure-input, secure-output) and name of the secure policy
classifier-group	Name of a CLACL attached to the interface and number of entry
packets	Number of packets classified by the CLACL
bytes	Number of bytes classified by the CLACL
mirror analyzer-ip-address	IP address of analyzer device
analyzer-virtual-router	Name of analyzer interface virtual router