[c-nsp] Cisco command to see active session on "cisco WS-C6503-E (R7000)"

[Andrew Jones]

No such thing, as sessions don't terminate on the router, and it doesn't track state of traffic like a firewall might.

You need something like netflow to monitor and record the traffic.

Netstat works on a windows machine as the sessions are terminated on that server.

Andrew Jones
Alphawest | Optus Business

From: Samol [mailto:molasian at gmail.com]
Sent: Thursday, 13 December 2012 1:47 PM
To: Andrew Jones
Cc: cisco-nsp at puck.nether.net
Subject: RE: [c-nsp] Cisco command to see active session on "cisco WS-C6503-E (R7000)"


Hi Aj,

that command can do without having to enable this. its like the command uses on windows "netstat?" so that see can see the active sessions which
are goung thru router.

Regards,
Sam
On Dec 13, 2012 9:40 AM, "Andrew Jones" <Andrew.Jones at alphawest.com.au<mailto:Andrew.Jones at alphawest.com.au>> wrote:
Ok, so you mean sessions going through the router?

You need netflow enabled on the switch, then enable "ip flow ingress"  and "ip flow egress" on the interface you are interested in, then perform a "show ip cache flow"

It will give you this info, but alot of it uses HEX codes you need to translate... (google is your friend)

Andrew Jones
Alphawest | Optus Business

From: Samol [mailto:molasian at gmail.com<mailto:molasian at gmail.com>]
Sent: Thursday, 13 December 2012 1:25 PM
To: Andrew Jones
Cc: cisco-nsp at puck.nether.net<mailto:cisco-nsp at puck.nether.net>
Subject: Re: [c-nsp] Cisco command to see active session on "cisco WS-C6503-E (R7000)"

Hi AJ,

No, the output of this command shows us the source/Destinaion IP address using UDP or TCP etc.

Regards,
Sam

2012/12/13 Andrew Jones <Andrew.Jones at alphawest.com.au<mailto:Andrew.Jones at alphawest.com.au>>
Do you mean to see who is logged into the cli?

Try  "who"

Andrew Jones

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net<mailto:cisco-nsp-bounces at puck.nether.net> [mailto:cisco-nsp-bounces at puck.nether.net<mailto:cisco-nsp-bounces at puck.nether.net>] On Behalf Of Samol
Sent: Thursday, 13 December 2012 12:57 PM
To: cisco-nsp at puck.nether.net<mailto:cisco-nsp at puck.nether.net>
Subject: [c-nsp] Cisco command to see active session on "cisco WS-C6503-E (R7000)"

Hi All,

I believe there is a command that we can use to see the active sessions
on cisco WS-C6503-E (R7000), but somehow I can't remember what the command
is. Pls let me know if you know this command.

Regards,
Sam
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net<mailto:cisco-nsp at puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/